Supply Chain Incidents

MAL-2026-11570

Malicious code in @nebula.js/nucleus (npm)

MAL-2026-11910

Malicious code in @servicetitan/onboarding-ui (npm)

MAL-2026-11842

Malicious code in @servicetitan/contentful-proxy (npm)

MAL-2026-12016

Malicious code in @keyv/memcache (npm)

MAL-2026-12017

Malicious code in @keyv/mongo (npm)

MAL-2026-12015

Malicious code in @keyv/etcd (npm)

MAL-2026-12023

Malicious code in @keyv/sqlite (npm)

MAL-2026-12025

Malicious code in @keyv/valkey (npm)

MAL-2026-12020

Malicious code in @keyv/redis (npm)

MAL-2026-12018

Malicious code in @keyv/mysql (npm)

MAL-2026-12019

Malicious code in @keyv/postgres (npm)

MAL-2026-12021

Malicious code in @keyv/serialize-msgpackr (npm)

MAL-2026-12010

Malicious code in @keyv/compress-gzip (npm)

MAL-2026-12013

Malicious code in @keyv/encrypt-node (npm)

MAL-2026-12012

Malicious code in @keyv/dynamo (npm)

MAL-2026-12009

Malicious code in @keyv/compress-brotli (npm)

MAL-2026-12011

Malicious code in @keyv/compress-lz4 (npm)

MAL-2026-12014

Malicious code in @keyv/encrypt-web (npm)

MAL-2026-12022

Malicious code in @keyv/serialize-superjson (npm)

MAL-2026-12024

Malicious code in @keyv/test-suite (npm)

MAL-2026-12008

Malicious code in @keyv/cloudflare-kv (npm)

MAL-2026-12007

Malicious code in @keyv/bigmap (npm)

MAL-2026-11928

Malicious code in @servicetitan/suppress-warnings (npm)

MAL-2026-11970

Malicious code in file-entry-cache (npm)