Supply Chain Incidents

MAL-2026-1106

Malicious code in expressjs-lint (npm)

MAL-2026-1112

Malicious code in sequelization (npm)

MAL-2026-1109

Malicious code in jsnwebapptoken (npm)

MAL-2026-1105

Malicious code in daytonjs (npm)

MAL-2026-1103

Malicious code in bee-quarl (npm)

MAL-2026-1111

Malicious code in mqttoken (npm)

MAL-2026-1104

Malicious code in bubble-core (npm)

MAL-2026-1107

Malicious code in formmiderable (npm)

MAL-2026-1100

Malicious code in ng-vzbootstrap (npm)

MAL-2026-1099

Malicious code in pyclogger (PyPI)

MAL-2026-1098

Malicious code in noteasonfnsource (PyPI)

MAL-2026-1097

Malicious code in botbooster (PyPI)

MAL-2026-1096

Malicious code in sketch-measure (npm)

MAL-2026-1095

Malicious code in jquery-display (npm)

MAL-2026-1094

Malicious code in dc-web-app (npm)

MAL-2026-1093

Malicious code in naughty-package (npm)

MAL-2026-1092

Malicious code in jwrincident (PyPI)

MAL-2026-1091

Malicious code in myproject-bola (PyPI)

MAL-2026-1090

Malicious code in isb (PyPI)

MAL-2026-1089

Malicious code in randomstringgen (PyPI)

MAL-2026-1088

Malicious code in bladebit (PyPI)

MAL-2026-1087

Malicious code in bps-design-system (npm)

MAL-2026-1086

Malicious code in tchap-bot (PyPI)

MAL-2026-1085

Malicious code in ctf-toolkit (PyPI)