Supply Chain Incidents

MAL-2026-14325

Malicious code in create-react-app-ui (npm)

MAL-2026-14323

Malicious code in cig-data-patcher (npm)

MAL-2026-14322

Malicious code in debug-fnt (npm)

MAL-2026-14318

Malicious code in frenchworldcupwin (npm)

MAL-2026-14320

Malicious code in test-flow-entire6 (npm)

MAL-2026-14319

Malicious code in test-flow-1 (npm)

MAL-2026-14321

Malicious code in test-flow-entire7 (npm)

MAL-2026-14317

Malicious code in fetch-webjs-script (npm)

MAL-2026-14315

Malicious code in @httttt/mcp-demo (npm)

MAL-2026-14316

Malicious code in expect-dotenv (npm)

MAL-2026-14338

Malicious code in proc_macro1 (crates.io)

MAL-2026-14334

Malicious code in arone (crates.io)

MAL-2026-14332

Malicious code in aovine (crates.io)

MAL-2026-14340

Malicious code in tinymember (crates.io)

MAL-2026-14336

Malicious code in arrayref (crates.io)

MAL-2026-14339

Malicious code in proc_macro_en (crates.io)

MAL-2026-14335

Malicious code in aronenao (crates.io)

MAL-2026-14333

Malicious code in append_only_vec (crates.io)

MAL-2026-14337

Malicious code in internment (crates.io)

MAL-2026-14308

Malicious code in libasync (PyPI)

MAL-2026-14307

Malicious code in express-route-engine (npm)

MAL-2026-14306

Malicious code in rc4-secure (PyPI)

MAL-2026-14305

Malicious code in mc-provider (npm)

MAL-2026-14304

Malicious code in base99-85x (npm)