Supply Chain Incidents

MAL-2026-2354

Malicious code in ecto-registry (npm)

MAL-2026-2352

Malicious code in ecto-corsair-lwirz (npm)

MAL-2026-2353

Malicious code in ecto-engine (npm)

MAL-2026-2351

Malicious code in dotenv-xtend (npm)

MAL-2026-2350

Malicious code in dotenv-express (npm)

MAL-2026-2349

Malicious code in deriv_ppetest (npm)

MAL-2026-2348

Malicious code in cursed-module (npm)

MAL-2026-2347

Malicious code in ctf-package-onetimeuseforctf (npm)

MAL-2026-2346

Malicious code in corsair-module (npm)

MAL-2026-2345

Malicious code in codecoverage-tools (npm)

MAL-2026-2344

Malicious code in codeanalysis-common (npm)

MAL-2026-2343

Malicious code in chain-multer (npm)

MAL-2026-2342

Malicious code in chai-set (npm)

MAL-2026-2341

Malicious code in chai-chain-cognivault (npm)

MAL-2026-2340

Malicious code in chai-chain-argon (npm)

MAL-2026-2339

Malicious code in chai-as-chains (npm)

MAL-2026-2338

Malicious code in chai-as-attached (npm)

MAL-2026-2337

Malicious code in chai-as-aligned (npm)

MAL-2026-2336

Malicious code in cdnjavacss (npm)

MAL-2026-2335

Malicious code in azurestack-common (npm)

MAL-2026-2334

Malicious code in argon-node (npm)

MAL-2026-2333

Malicious code in @pansycareful/github-helper (npm)

MAL-2026-2332

Malicious code in @hsbc-mfe/host (npm)

MAL-2026-2331

Malicious code in @girirajravichandran/corp-build-utils-poc (npm)