Supply Chain Incidents

MAL-2026-6503

Malicious code in js-price-client-node (npm)

MAL-2026-6502

Malicious code in js-client-node (npm)

MAL-2026-6498

Malicious code in dttfdsdee (npm)

MAL-2026-6497

Malicious code in chai-as-synced (npm)

MAL-2026-6500

Malicious code in set-cookie-ease (npm)

MAL-2026-6499

Malicious code in mongoose-json-format (npm)

MAL-2026-6496

Malicious code in @dervix/ws (npm)

MAL-2026-6501

Malicious code in wellnpm (npm)

MAL-2026-6495

Malicious code in animatecss-postcss-plugin (npm)

MAL-2026-6494

Malicious code in @help-forms/application-aff (npm)

MAL-2026-6490

Malicious code in data-parser-utils (npm)

MAL-2026-6493

Malicious code in prism-silq (npm)

MAL-2026-6492

Malicious code in hexo-shoka-swiper (npm)

MAL-2026-6491

Malicious code in hexo-deployer-wrangler (npm)

MAL-2026-6484

Malicious code in random-string-64 (npm)

MAL-2026-6489

Malicious code in extra-huggingface (PyPI)

MAL-2026-6488

Malicious code in pyext6cc8cd (PyPI)

MAL-2026-6482

Malicious code in kelly-stake (npm)

MAL-2026-6480

Malicious code in gx-npm-lib (npm)

MAL-2026-6481

Malicious code in gx-npm-ui (npm)

MAL-2026-6487

Malicious code in velocityfix (npm)

MAL-2026-6483

Malicious code in log-update-ts (npm)

MAL-2026-6479

Malicious code in @salem_jalal/osc-components (npm)

MAL-2026-6486

Malicious code in unsafe-malicious-package (npm)