Supply Chain Incidents

MAL-2026-14093

Malicious code in rtms-manager-dev (npm)

MAL-2026-14080

Malicious code in expect-bundle (npm)

MAL-2026-14088

Malicious code in nolimitcity (npm)

MAL-2026-14094

Malicious code in saps_secplayground_npm_ai (npm)

MAL-2026-14019

Malicious code in fr-ito-web-react (npm)

MAL-2026-14016

Malicious code in preinstall-hook-webhook-callback-demo (npm)

MAL-2026-13990

Malicious code in wct-st (npm)

MAL-2026-13991

Malicious code in webautomation_js (npm)

MAL-2026-13989

Malicious code in @secauditb20y/sec-test-r3b (npm)

MAL-2026-14009

Malicious code in root-locator (npm)

MAL-2026-14013

Malicious code in source-analyzer (npm)

MAL-2026-14005

Malicious code in path-match-js (npm)

MAL-2026-14007

Malicious code in react-shield (npm)

MAL-2026-13972

Malicious code in @jacksher/install-exec-poc (npm)

MAL-2026-13985

Malicious code in node-config-svg-contract (npm)

MAL-2026-13986

Malicious code in notafollower (npm)

MAL-2026-13978

Malicious code in datefmt-util-helper (npm)

MAL-2026-13973

Malicious code in @khaznatech/common (npm)

MAL-2026-13975

Malicious code in @khaznatech/utils (npm)

MAL-2026-13974

Malicious code in @khaznatech/core (npm)

MAL-2026-13976

Malicious code in check-audit (npm)

MAL-2026-13982

Malicious code in in-install (npm)

MAL-2026-13977

Malicious code in cspell-esm (npm)

MAL-2026-13984

Malicious code in napi-raw (npm)