Supply Chain Incidents

MAL-2026-11124

Malicious code in api-node-sdk (npm)

MAL-2026-11136

Malicious code in fluid-type-ui (npm)

MAL-2026-11133

Malicious code in chain-analyze (npm)

MAL-2026-11159

Malicious code in toll_free (npm)

MAL-2026-11118

Malicious code in array-sort-helper (npm)

MAL-2026-11119

Malicious code in json-to-table-util (npm)

MAL-2026-11107

Malicious code in num-format-helper (npm)

MAL-2026-11106

Malicious code in date-sanitize-helper (npm)

MAL-2026-11108

Malicious code in string-format-kit (npm)

MAL-2026-11097

Malicious code in @vaultflow/update-flow (npm)

MAL-2026-11096

Malicious code in @vaultflow/create-flow (npm)

MAL-2026-11101

Malicious code in motion-forge-css (npm)

MAL-2026-11094

Malicious code in cfgzen (PyPI)

MAL-2026-11093

Malicious code in @heartlandone-private/fontawesome-pro (npm)

MAL-2026-11100

Malicious code in identityauthorizationserv (npm)

MAL-2026-11098

Malicious code in crm-reportinsightserv-paypal (npm)

MAL-2026-11102

Malicious code in riskunifiedgatewayserv (npm)

MAL-2026-11105

Malicious code in xo-twofa (npm)

MAL-2026-11103

Malicious code in stargateproxyserv (npm)

MAL-2026-11099

Malicious code in demo-awesome-date-parser-test (npm)

MAL-2026-11095

Malicious code in @array-util/subsearch (npm)

MAL-2026-11104

Malicious code in tailwind-motionkit (npm)

MAL-2026-11087

Malicious code in kalipto-runtime (npm)

MAL-2026-11078

Malicious code in @thone33/react-helpers (npm)