Supply Chain Incidents

MAL-2026-13979

Malicious code in eslint-generate-prerelease (npm)

MAL-2026-13983

Malicious code in knip-bun (npm)

MAL-2026-13980

Malicious code in eslint-generate-release (npm)

MAL-2026-13981

Malicious code in eslint-publish-release (npm)

MAL-2026-13987

Malicious code in resolve-audit (npm)

MAL-2026-13968

Malicious code in @hzero-front-ui/cfg (npm)

MAL-2026-13967

Malicious code in @hzero-front-ui/c7n-ui (npm)

MAL-2026-13969

Malicious code in @hzero-front-ui/core (npm)

MAL-2026-13970

Malicious code in @hzero-front-ui/hzero-ui (npm)

MAL-2026-13971

Malicious code in @hzero-front-ui/themes (npm)

MAL-2026-13988

Malicious code in xrblocks-mcp (npm)

MAL-2026-13966

Malicious code in tizen-webdriver-cli (npm)

MAL-2026-13965

Malicious code in nc-verify-127942 (npm)

MAL-2026-13964

Malicious code in bs58-15 (npm)

MAL-2026-13941

Malicious code in @solana-js/web3 (npm)

MAL-2026-13949

Malicious code in external-process-live-log (npm)

MAL-2026-13939

Malicious code in @leonardo0902/vortex-kit (npm)

MAL-2026-13952

Malicious code in global-intel (npm)

MAL-2026-13963

Malicious code in vexium-kit (npm)

MAL-2026-13938

Malicious code in @kolbo/mcp (npm)

MAL-2026-13962

Malicious code in ventra-kit (npm)

MAL-2026-13959

Malicious code in prediction-trader (npm)

MAL-2026-13961

Malicious code in velora-kit (npm)

MAL-2026-13942

Malicious code in chai-as-reformed (npm)