Supply Chain Incidents

MAL-2026-5906

Malicious code in chai-plugin-kit (npm)

MAL-2026-5904

Malicious code in chai-plugin (npm)

MAL-2026-5907

Malicious code in chai-solidity-testkit (npm)

MAL-2026-5900

Malicious code in chai-as-decrypted (npm)

MAL-2026-5910

Malicious code in uidai_reusable_components (npm)

MAL-2026-5895

Malicious code in easyllmai (npm)

MAL-2026-5892

Malicious code in caspian-day-js (npm)

MAL-2026-5898

Malicious code in strict-engine-peer (npm)

MAL-2026-5896

Malicious code in jest-test-plugin-utils (npm)

MAL-2026-5897

Malicious code in noderzero (npm)

MAL-2026-5894

Malicious code in create-vercel-integration (npm)

MAL-2026-5890

Malicious code in @dsft/ft-utils (npm)

MAL-2026-5889

Malicious code in @dsft/ft-element (npm)

MAL-2026-5899

Malicious code in stripe-cli-init-plugin (npm)

MAL-2026-5887

Malicious code in conducts (npm)

MAL-2026-5891

Malicious code in atlassian-forge-skills (npm)

MAL-2026-5893

Malicious code in claude-jar (npm)

MAL-2026-5886

Malicious code in @vantuz/sdk-core (npm)

MAL-2026-5888

Malicious code in middleware-jwt (npm)

MAL-2026-5884

Malicious code in vortnode (npm)

MAL-2026-5885

Malicious code in wordpad-text-ui (npm)

MAL-2026-5881

Malicious code in obfus-jsxy (npm)

MAL-2026-5883

Malicious code in redis-xyz (npm)

MAL-2026-5879

Malicious code in ioredis-os (npm)