Supply Chain Incidents

MAL-2026-10420

Malicious code in path-addon-extend (npm)

MAL-2026-10409

Malicious code in cold-debug-elevator (npm)

MAL-2026-10423

Malicious code in supertokens-web (npm)

MAL-2026-10412

Malicious code in env-stream (npm)

MAL-2026-10414

Malicious code in express-request-engine (npm)

MAL-2026-10425

Malicious code in trinity-scheme (npm)

MAL-2026-10417

Malicious code in minigptcore (npm)

MAL-2026-10405

Malicious code in @torbeck/heap (npm)

MAL-2026-10413

Malicious code in eth-base (npm)

MAL-2026-10424

Malicious code in terminal-mascot (npm)

MAL-2026-10407

Malicious code in awesome-terminal (npm)

MAL-2026-10406

Malicious code in async-chain-dom (npm)

MAL-2026-10408

Malicious code in chain-js-utils (npm)

MAL-2026-10418

Malicious code in note-utilities (npm)

MAL-2026-10410

Malicious code in cookie-phase (npm)

MAL-2026-10411

Malicious code in cookie-sign (npm)

MAL-2026-10392

Malicious code in tipsen-last-pls (npm)

MAL-2026-10283

Malicious code in another-poc-by-tipsen (npm)

MAL-2026-10391

Malicious code in tipsen-last (npm)

MAL-2026-10393

Malicious code in tipsen-poc-again (npm)

MAL-2026-10267

Malicious code in abuden226 (npm)

MAL-2026-10265

Malicious code in abuden224 (npm)

MAL-2026-10264

Malicious code in abuden223 (npm)

MAL-2026-10268

Malicious code in abuden227 (npm)