Supply Chain Incidents

MAL-2026-10657

Malicious code in @sauruslord/baileys (npm)

MAL-2026-10654

Malicious code in @debile/require-dir (npm)

MAL-2026-10635

Malicious code in gmail-changer (npm)

MAL-2026-10638

Malicious code in monogrok (npm)

MAL-2026-10631

Malicious code in core-dotenv (npm)

MAL-2026-10634

Malicious code in estore-client (npm)

MAL-2026-10639

Malicious code in ogensec-sdk (npm)

MAL-2026-10633

Malicious code in creditgauge (npm)

MAL-2026-10642

Malicious code in data-proxy-for-test (PyPI)

MAL-2026-10643

Malicious code in ethereum-input-decorder (PyPI)

MAL-2026-10653

Malicious code in webpack-session-cache (npm)

MAL-2026-10641

Malicious code in polygon-toolkit-validator (npm)

MAL-2026-10640

Malicious code in polygon-toolkit-validation (npm)

MAL-2026-10645

Malicious code in @bcs-mi-ui/message (npm)

MAL-2026-10646

Malicious code in @bcs-mi-ui/message-block (npm)

MAL-2026-10647

Malicious code in @bcs-mi-ui/test1243npmpacket76 (npm)

MAL-2026-10625

Malicious code in @leviosa86com/leviosa86-test (npm)

MAL-2026-10636

Malicious code in leviosa86-test (npm)

MAL-2026-10628

Malicious code in ai-explain (npm)

MAL-2026-10629

Malicious code in ai-pro-sdk (npm)

MAL-2026-10648

Malicious code in @hkyyy/portal-widget-helper-0601 (npm)

MAL-2026-10649

Malicious code in @saladin0x1/js-shared-modules (npm)

MAL-2026-10630

Malicious code in chai-as-byte (npm)

MAL-2026-10627

Malicious code in @sqlite-frame/nodesql (npm)