Supply Chain Incidents

MAL-2026-11144

Malicious code in react-puller (npm)

MAL-2026-11158

Malicious code in blots (npm)

MAL-2026-11130

Malicious code in array-node-utils (npm)

MAL-2026-11151

Malicious code in text-line-parser (npm)

MAL-2026-11146

Malicious code in sigchain-js (npm)

MAL-2026-11121

Malicious code in @apexfnd/apex (npm)

MAL-2026-11142

Malicious code in node-array-plus (npm)

MAL-2026-11150

Malicious code in streak-daily-lib (npm)

MAL-2026-11143

Malicious code in parallely (npm)

MAL-2026-11135

Malicious code in ethers-secure (npm)

MAL-2026-11152

Malicious code in tidal-embed-player (npm)

MAL-2026-11131

Malicious code in basic-vite (npm)

MAL-2026-11153

Malicious code in triage_bot_using_sdkv3 (npm)

MAL-2026-11137

Malicious code in jobber-app-template-react (npm)

MAL-2026-11123

Malicious code in @yancyyu/agentcli (npm)

MAL-2026-11155

Malicious code in xerohub-discord-voice-v3 (npm)

MAL-2026-11154

Malicious code in xerohub-discord-voice-v2 (npm)

MAL-2026-11141

Malicious code in lib-streak-math (npm)

MAL-2026-11120

Malicious code in @ai_/autoprefixers (npm)

MAL-2026-11126

Malicious code in app-sim-layer (npm)

MAL-2026-11127

Malicious code in app-sima-layer (npm)

MAL-2026-11128

Malicious code in app-soda-layer (npm)

MAL-2026-11129

Malicious code in app-svm-layer (npm)

MAL-2026-11125

Malicious code in api-rust-sdk (npm)