Supply Chain Incidents

MAL-2026-1736

Malicious code in fe-lib-singleton (npm)

MAL-2026-1737

Malicious code in fe-lib-theme (npm)

MAL-2026-1735

Malicious code in fe-lib-sequences (npm)

MAL-2026-1734

Malicious code in fdir3 (npm)

MAL-2026-1733

Malicious code in express-security-suite-2024 (npm)

MAL-2026-1732

Malicious code in express-ranges (npm)

MAL-2026-1731

Malicious code in express-http-validator (npm)

MAL-2026-1730

Malicious code in express-configers (npm)

MAL-2026-1729

Malicious code in eslint-plugin-superhuman-custom-rules (npm)

MAL-2026-1728

Malicious code in escaux (npm)

MAL-2026-1727

Malicious code in es1int-configer (npm)

MAL-2026-1726

Malicious code in ersagent-frontend (npm)

MAL-2026-1725

Malicious code in env-workflow-test (npm)

MAL-2026-1724

Malicious code in engineers (npm)

MAL-2026-1723

Malicious code in elf-stats-velvet-ledger-928 (npm)

MAL-2026-1722

Malicious code in ehance-assistant33 (npm)

MAL-2026-1721

Malicious code in ehance-assistant (npm)

MAL-2026-1720

Malicious code in dubbo-web-example (npm)

MAL-2026-1719

Malicious code in dstny (npm)

MAL-2026-1718

Malicious code in dpc-sign (npm)

MAL-2026-1717

Malicious code in dotenvx-int (npm)

MAL-2026-1716

Malicious code in dotenv-plugin (npm)

MAL-2026-1715

Malicious code in dotenv-nodejs (npm)

MAL-2026-1714

Malicious code in dotenv-node-promised (npm)