Supply Chain Incidents

MAL-2026-5599

Malicious code in 0x2ai-ivo (npm)

0x2ai-demo8x

MAL-2026-5596

Malicious code in 0x2ai-demo8x (npm)

0x2ai-demo1

MAL-2026-5587

Malicious code in 0x2ai-demo1 (npm)

0x2ai-demo9x

MAL-2026-5598

Malicious code in 0x2ai-demo9x (npm)

0x2ai-zoe

MAL-2026-5602

Malicious code in 0x2ai-zoe (npm)

backup-my-data

MAL-2026-5603

Malicious code in backup-my-data (npm)

clean-my-pc

MAL-2026-5609

Malicious code in clean-my-pc (npm)

sysbu

MAL-2026-5616

Malicious code in sysbu (npm)

sysau

MAL-2026-5615

Malicious code in sysau (npm)

sysnu

MAL-2026-5617

Malicious code in sysnu (npm)

coderzero

MAL-2026-5610

Malicious code in coderzero (npm)

gpt-sdk

MAL-2026-5612

Malicious code in gpt-sdk (npm)

telebot-server

MAL-2026-5620

Malicious code in telebot-server (npm)

Backdoor

twilio-sdk

MAL-2026-5621

Malicious code in twilio-sdk (npm)

vite-tsconfig

MAL-2026-5576

Malicious code in vite-tsconfig (npm)

ai-sdk-helpers

MAL-2026-5565

Malicious code in ai-sdk-helpers (npm)

fastify-addon

MAL-2026-5566

Malicious code in fastify-addon (npm)

web-pool

MAL-2026-5577

Malicious code in web-pool (npm)

sendgrid-sdk

MAL-2026-5572

Malicious code in sendgrid-sdk (npm)

webpack-cache-cycle

MAL-2026-5579

Malicious code in webpack-cache-cycle (npm)

webpack-patch

MAL-2026-5581

Malicious code in webpack-patch (npm)

webpack-cache-clean

MAL-2026-5578

Malicious code in webpack-cache-clean (npm)

webpack-cache-reset

MAL-2026-5580

Malicious code in webpack-cache-reset (npm)

wp-env

MAL-2026-5582

Malicious code in wp-env (npm)