Supply Chain Incidents

MAL-2026-11230

Malicious code in @sourav_chanduka/core-no-ngrok (npm)

MAL-2026-11234

Malicious code in @web3utils/common (npm)

MAL-2026-11228

Malicious code in @solana-utils/common (npm)

MAL-2026-11233

Malicious code in @web3-util/common (npm)

MAL-2026-11277

Malicious code in discord-csr (npm)

MAL-2026-11279

Malicious code in discord-rsc (npm)

MAL-2026-11393

Malicious code in tailwindcssss (npm)

MAL-2026-11394

Malicious code in tailwindcsssss (npm)

MAL-2026-11224

Malicious code in @pumpdot-fun/pump-swap-sdk (npm)

MAL-2026-11225

Malicious code in @relforce-dev/console-log (npm)

MAL-2026-11223

Malicious code in @pumpdot-fun/pump-sdk (npm)

MAL-2026-11216

Malicious code in @node-console-log/log (npm)

MAL-2026-11314

Malicious code in fwf (npm)

MAL-2026-11226

Malicious code in @santieich/homebridge-midea-lan (npm)

MAL-2026-11309

Malicious code in famshot (npm)

MAL-2026-11240

Malicious code in aruda (npm)

MAL-2026-11219

Malicious code in @patternfly-4/quickstarts (npm)

MAL-2026-11222

Malicious code in @patternfly-4/react-tokens (npm)

MAL-2026-11220

Malicious code in @patternfly-4/react-core (npm)

MAL-2026-11221

Malicious code in @patternfly-4/react-table (npm)

MAL-2026-11339

Malicious code in node-fetch-core (npm)

MAL-2026-11217

Malicious code in @nordea-web/core (npm)

MAL-2026-11218

Malicious code in @nordea-web/ui (npm)

MAL-2026-11338

Malicious code in ncc-web (npm)