Supply Chain Incidents

MAL-2026-10557

Malicious code in @cw-ui/micro-ui-loader (npm)

MAL-2026-10564

Malicious code in micro-ui-loader (npm)

MAL-2026-10556

Malicious code in @cw-ui/asio-neon-themes (npm)

MAL-2026-10551

Malicious code in elsisi-cli (npm)

MAL-2026-10553

Malicious code in home-mp-commons (npm)

MAL-2026-10566

Malicious code in sight-bind (npm)

MAL-2026-10561

Malicious code in dom-weave (npm)

MAL-2026-10563

Malicious code in humanize-kit (npm)

MAL-2026-10560

Malicious code in clipboard-drop (npm)

MAL-2026-10565

Malicious code in relative-time-live (npm)

MAL-2026-10559

Malicious code in avatar-forge (npm)

MAL-2026-10570

Malicious code in valid-scope (npm)

MAL-2026-10567

Malicious code in string-morph (npm)

MAL-2026-10568

Malicious code in sync-logger (npm)

MAL-2026-10569

Malicious code in temp-cloak (npm)

MAL-2026-10562

Malicious code in duration-kit (npm)

MAL-2026-10555

Malicious code in @codex2005/logger-core (npm)

MAL-2026-10550

Malicious code in better-tailwindcss (npm)

MAL-2026-10546

Malicious code in viteplugiin (npm)

MAL-2026-10531

Malicious code in chain-devkit (npm)

MAL-2026-10535

Malicious code in my-empty-package (npm)

MAL-2026-10547

Malicious code in pokee-data-utils (PyPI)

MAL-2026-10532

Malicious code in fluterjs (npm)

MAL-2026-10530

Malicious code in cbr-internal-utils (npm)