Supply Chain Incidents

MAL-2026-11176

Malicious code in @bowozzz/baileys (npm)

MAL-2026-11157

Malicious code in @mypwn/hawkeye (npm)

MAL-2026-11499

Malicious code in @types-beta/sdk (npm)

MAL-2026-11161

Malicious code in @joyfill/layouts (npm)

MAL-2026-11160

Malicious code in @joyfill/components (npm)

MAL-2026-11168

Malicious code in postcss-motion-utils (npm)

MAL-2026-11163

Malicious code in aone-kit-cli (npm)

MAL-2026-11167

Malicious code in local-config-parser (npm)

MAL-2026-11162

Malicious code in aone-kit (npm)

MAL-2026-11166

Malicious code in lib-mtop (npm)

MAL-2026-11164

Malicious code in aone-sandbox (npm)

MAL-2026-11165

Malicious code in cloud-config-fetcher (npm)

MAL-2026-11169

Malicious code in smart-config-manager (npm)

MAL-2026-11147

Malicious code in simple-probe-utils (npm)

MAL-2026-11140

Malicious code in korvica (npm)

MAL-2026-11148

Malicious code in streak-core-lib (npm)

MAL-2026-11156

Malicious code in vtranalytic (PyPI)

MAL-2026-11134

Malicious code in color-convert-helper (npm)

MAL-2026-11138

Malicious code in json-schema-inspector (npm)

MAL-2026-11132

Malicious code in bianira-ui (npm)

MAL-2026-11149

Malicious code in streak-core-math (npm)

MAL-2026-11122

Malicious code in @crbrc/xbt (npm)

MAL-2026-11139

Malicious code in kordyn (npm)

MAL-2026-11145

Malicious code in rollup-runtime-core-polyfills (npm)