Supply Chain Incidents

MAL-2026-13462

Malicious code in trimprompt (npm)

MAL-2026-13463

Malicious code in vite-plugin-cleaner (npm)

MAL-2026-13464

Malicious code in vite-svg-parse (npm)

MAL-2026-13465

Malicious code in vite-vue-path-map (npm)

MAL-2026-13468

Malicious code in xdaxx (npm)

MAL-2026-13469

Malicious code in xxdxax (npm)

MAL-2026-13470

Malicious code in ynastore-baileys (npm)

MAL-2026-13471

Malicious code in zyr-agent (npm)

MAL-2026-13445

Malicious code in elephant-tusk-runner (npm)

MAL-2026-13452

Malicious code in opencode-optimised-toolings (npm)

MAL-2026-13444

Malicious code in dpdgroup-css (npm)

MAL-2026-13447

Malicious code in gpt-terminal-cli (npm)

MAL-2026-13446

Malicious code in express-chai (npm)

MAL-2026-13466

Malicious code in wormgpt-cli (npm)

MAL-2026-13454

Malicious code in poc-ch4rlygr (npm)

MAL-2026-13475

Malicious code in sui-graphql-client (npm)

MAL-2026-13476

Malicious code in sui-migration-audit-cli (npm)

MAL-2026-13450

Malicious code in move-bcs-codec (npm)

MAL-2026-13477

Malicious code in svelte-visual-map (npm)

MAL-2026-13432

Malicious code in @junyoung-kim/reins (npm)

MAL-2026-13434

Malicious code in @lyxa.ai/core (npm)

MAL-2026-13431

Malicious code in @itsreduxtm/unpkg-xss-test (npm)

MAL-2026-13433

Malicious code in @ks-video/kwai-player-web (npm)

MAL-2026-13451

Malicious code in nms-dashboard-js (npm)