Supply Chain Incidents

MAL-2026-11212

Malicious code in @goodjavascript/dotenv (npm)

MAL-2026-11278

Malicious code in discord-ms (npm)

MAL-2026-11280

Malicious code in discord-starter (npm)

MAL-2026-11320

Malicious code in imut-set (npm)

MAL-2026-11327

Malicious code in lodash-ex (npm)

MAL-2026-11235

Malicious code in ag-grid-boost (npm)

MAL-2026-11365

Malicious code in react-ag-grid (npm)

MAL-2026-11409

Malicious code in wastu (npm)

MAL-2026-11396

Malicious code in test-wastu (npm)

MAL-2026-11377

Malicious code in scol (npm)

MAL-2026-11248

Malicious code in blbird (npm)

MAL-2026-11412

Malicious code in zcas (npm)

MAL-2026-11385

Malicious code in spectral-wraith (npm)

MAL-2026-11232

Malicious code in @spectraltest/loglevel (npm)

MAL-2026-11287

Malicious code in ecto-logger (npm)

MAL-2026-11384

Malicious code in spectral-corsair (npm)

MAL-2026-11272

Malicious code in curse-dependent (npm)

MAL-2026-11361

Malicious code in puppetewebr (npm)

MAL-2026-11301

Malicious code in etwl (npm)

MAL-2026-11348

Malicious code in pretierr (npm)

MAL-2026-11330

Malicious code in malxios (npm)

MAL-2026-11329

Malicious code in maalxios (npm)

MAL-2026-11230

Malicious code in @sourav_chanduka/core-no-ngrok (npm)

MAL-2026-11229

Malicious code in @sourav_chanduka/core (npm)