Supply Chain Incidents

MAL-2026-10141

Malicious code in @genie-auth/config (npm)

@amtrav/webservice

MAL-2026-10140

Malicious code in @amtrav/webservice (npm)

ng-search-api

MAL-2026-10146

Malicious code in ng-search-api (npm)

motiondnb

MAL-2026-10145

Malicious code in motiondnb (npm)

react-jsonwebtoken

MAL-2026-10132

Malicious code in react-jsonwebtoken (npm)

theta-sdk-js

MAL-2026-10135

Malicious code in theta-sdk-js (npm)

polygon-gama-apis

MAL-2026-10147

Malicious code in polygon-gama-apis (npm)

polygon-gamma-apis

MAL-2026-10148

Malicious code in polygon-gamma-apis (npm)

mdb-vite

MAL-2026-10144

Malicious code in mdb-vite (npm)

polymarket-gamma-apis

MAL-2026-10149

Malicious code in polymarket-gamma-apis (npm)

marked-prettier

MAL-2026-10143

Malicious code in marked-prettier (npm)

eslint-jest

MAL-2026-10142

Malicious code in eslint-jest (npm)

stella-ai-cli

MAL-2026-10133

Malicious code in stella-ai-cli (npm)

stella-coder

MAL-2026-10134

Malicious code in stella-coder (npm)

Backdoor

turbocalc

PyPI

MAL-2026-10139

Malicious code in turbocalc (PyPI)

uac-package

MAL-2026-10138

Malicious code in uac-package (npm)

express-session-kit

MAL-2026-10131

Malicious code in express-session-kit (npm)

transform-es2015-sticky-regex

MAL-2026-10136

Malicious code in transform-es2015-sticky-regex (npm)

type-elint

MAL-2026-10137

Malicious code in type-elint (npm)

ohcm-culture-formatting

MAL-2026-10128

Malicious code in ohcm-culture-formatting (npm)

eth-react-redirection

MAL-2026-10127

Malicious code in eth-react-redirection (npm)

rtc-integration-frontend-sdk

MAL-2026-10129

Malicious code in rtc-integration-frontend-sdk (npm)

Typosquat

type-plint

MAL-2026-10130

Malicious code in type-plint (npm)

dowload_ebok_programming_in_haskell_second_edition_by_graham_hutton_c19wm

MAL-2026-10123

Malicious code in dowload_ebok_programming_in_haskell_second_edition_by_graham_hutton_c19wm (npm)