Supply Chain Incidents

MAL-2026-10667

Malicious code in true (npm)

MAL-2026-10658

Malicious code in @sauruslord/eslint-config (npm)

MAL-2026-10659

Malicious code in @sauruslord/libsignal (npm)

MAL-2026-10662

Malicious code in ssweb-wp (npm)

MAL-2026-10657

Malicious code in @sauruslord/baileys (npm)

MAL-2026-10661

Malicious code in sauruslord-baileys (npm)

MAL-2026-10663

Malicious code in zaldy-baileys (npm)

MAL-2026-10660

Malicious code in saurus-assets (npm)

MAL-2026-10654

Malicious code in @debile/require-dir (npm)

MAL-2026-10635

Malicious code in gmail-changer (npm)

MAL-2026-10638

Malicious code in monogrok (npm)

MAL-2026-10631

Malicious code in core-dotenv (npm)

MAL-2026-10634

Malicious code in estore-client (npm)

MAL-2026-10639

Malicious code in ogensec-sdk (npm)

MAL-2026-10633

Malicious code in creditgauge (npm)

MAL-2026-10642

Malicious code in data-proxy-for-test (PyPI)

MAL-2026-10643

Malicious code in ethereum-input-decorder (PyPI)

MAL-2026-10653

Malicious code in webpack-session-cache (npm)

MAL-2026-10641

Malicious code in polygon-toolkit-validator (npm)

MAL-2026-10640

Malicious code in polygon-toolkit-validation (npm)

MAL-2026-10645

Malicious code in @bcs-mi-ui/message (npm)

MAL-2026-10646

Malicious code in @bcs-mi-ui/message-block (npm)

MAL-2026-10647

Malicious code in @bcs-mi-ui/test1243npmpacket76 (npm)

MAL-2026-10625

Malicious code in @leviosa86com/leviosa86-test (npm)