Supply Chain Incidents

MAL-2026-10238

Malicious code in @gt-test-exp/profiler-exp-00000001 (npm)

MAL-2026-10241

Malicious code in @gt-test-exp/profiler-exp-00000004 (npm)

MAL-2026-10239

Malicious code in @gt-test-exp/profiler-exp-00000002 (npm)

MAL-2026-10242

Malicious code in @gt-test-exp/profiler-exp-00000005 (npm)

MAL-2026-10240

Malicious code in @gt-test-exp/profiler-exp-00000003 (npm)

MAL-2026-10300

Malicious code in dogfood-search (npm)

MAL-2026-10363

Malicious code in openai-apps (npm)

MAL-2026-10303

Malicious code in gpapps (npm)

MAL-2026-10302

Malicious code in gpapp (npm)

MAL-2026-10395

Malicious code in vibewise-cli (npm)

MAL-2026-10394

Malicious code in vibewise (npm)

MAL-2026-10284

Malicious code in apps-gpt (npm)

MAL-2026-10402

Malicious code in @gleamkit/ws (npm)

MAL-2026-10403

Malicious code in @iana-rzms/bff-sdk (npm)

MAL-2026-10401

Malicious code in @espn-ping/react-dmed-oauth (npm)

MAL-2026-10398

Malicious code in @db-tools/main-app (npm)

MAL-2026-10400

Malicious code in @equansservices/tool (npm)

MAL-2026-10399

Malicious code in @equansservices/codex (npm)

MAL-2026-10397

Malicious code in @car_loans/dealerships-approval (npm)

MAL-2026-10220

Malicious code in @jplopezy/connectivity-test-do-not-install (npm)

MAL-2026-10219

Malicious code in chai-as-precision (npm)

MAL-2026-10218

Malicious code in pure-folder-three (npm)

MAL-2026-10217

Malicious code in dotnet-runtime-base (npm)

MAL-2026-10216

Malicious code in node-sysmetrics (npm)