Supply Chain Incidents

MAL-2026-10520

Malicious code in fastify-bundler (npm)

MAL-2026-10517

Malicious code in @tqm-mfe/main (npm)

MAL-2026-10519

Malicious code in chai-as-sets (npm)

MAL-2026-10518

Malicious code in chai-as-auth (npm)

MAL-2026-10516

Malicious code in polymarket-bot-logger (npm)

MAL-2026-10513

Malicious code in nodemon-client (npm)

MAL-2026-10514

Malicious code in nodemon-eslint (npm)

MAL-2026-10515

Malicious code in nodemon-web (npm)

MAL-2026-10510

Malicious code in type-astr (npm)

MAL-2026-10511

Malicious code in type-swap (npm)

MAL-2026-10512

Malicious code in type-unique (npm)

MAL-2026-10507

Malicious code in nodemon-delog (npm)

MAL-2026-10508

Malicious code in nodemon-elint (npm)

MAL-2026-10504

Malicious code in chai-as-verified (npm)

MAL-2026-10506

Malicious code in node-fsagent (npm)

MAL-2026-10509

Malicious code in test_adminet (npm)

MAL-2026-10505

Malicious code in express-ini (npm)

MAL-2026-10501

Malicious code in filewisee (npm)

MAL-2026-10496

Malicious code in bubblestring (npm)

MAL-2026-10497

Malicious code in ddok-modal (npm)

MAL-2026-10503

Malicious code in n8n-nodes-rce-poc (npm)

MAL-2026-10502

Malicious code in gamified-trading-system (npm)

MAL-2026-10498

Malicious code in eslint-angular-react (npm)

MAL-2026-10500

Malicious code in express-bunker (npm)