Supply Chain Incidents

MAL-2026-6568

Malicious code in express-mocha-test (npm)

MAL-2026-6562

Malicious code in @epic-common/observability-node (npm)

MAL-2026-6574

Malicious code in yandex-geobase (npm)

MAL-2026-6571

Malicious code in react-wp-viewer (npm)

MAL-2026-6566

Malicious code in date-uuid (npm)

MAL-2026-6567

Malicious code in eslint-commit-parser (npm)

MAL-2026-6565

Malicious code in @uisp/utils (npm)

MAL-2026-6572

Malicious code in rebrandly-domains-digger (npm)

MAL-2026-6573

Malicious code in rebrandly-domains-search-client (npm)

MAL-2026-6672

Malicious code in ulid-xyz (npm)

MAL-2026-6598

Malicious code in @sailing-package/core (npm)

MAL-2026-6597

Malicious code in @longzy/react-native-polyfill (npm)

MAL-2026-6595

Malicious code in @digitalcnzz/commonmodule (npm)

MAL-2026-6596

Malicious code in @digitalcnzz/embedded-sdk (npm)

MAL-2026-6561

Malicious code in skillspector (PyPI)

MAL-2026-6560

Malicious code in tdata-grabber (PyPI)

MAL-2026-6559

Malicious code in lc-chatbot (npm)

MAL-2026-6558

Malicious code in fsociety-tools (PyPI)

MAL-2026-6556

Malicious code in polymarket-clob-math (npm)

MAL-2026-6555

Malicious code in livekit-agents (npm)

MAL-2026-6557

Malicious code in pkg-fallback (PyPI)

MAL-2026-6550

Malicious code in @k18n/creatormarketplace-admin-language (npm)

MAL-2026-6554

Malicious code in insomnia-test-util-m4gester (npm)

MAL-2026-6552

Malicious code in insomnia-plugin-poc-m4gester (npm)