Supply Chain Incidents

MAL-2026-6435

Malicious code in serverless-leo (npm)

leo-streams

MAL-2026-6431

Malicious code in leo-streams (npm)

syco1

MAL-2026-6404

Malicious code in syco1 (npm)

syspo

MAL-2026-6406

Malicious code in syspo (npm)

sypoi1

MAL-2026-6405

Malicious code in sypoi1 (npm)

@kl-dolphin/jump

MAL-2026-6403

Malicious code in @kl-dolphin/jump (npm)

@kl-dolphin/swim

MAL-2026-6402

Malicious code in @kl-dolphin/swim (npm)

zenith-utils

MAL-2026-6401

Malicious code in zenith-utils (npm)

python-dateutil2

PyPI

MAL-2026-6400

Malicious code in python-dateutil2 (PyPI)

normalize-plus

MAL-2026-6399

Malicious code in normalize-plus (npm)

ui-core-system

MAL-2026-6398

Malicious code in ui-core-system (npm)

ldapaotest

MAL-2026-6397

Malicious code in ldapaotest (npm)

cccmyssr2

MAL-2026-6391

Malicious code in cccmyssr2 (npm)

cccmyssr-util

MAL-2026-6390

Malicious code in cccmyssr-util (npm)

cccmyssr3

MAL-2026-6392

Malicious code in cccmyssr3 (npm)

react-campaign-optimizer

MAL-2026-6395

Malicious code in react-campaign-optimizer (npm)

signup-embedder

MAL-2026-6396

Malicious code in signup-embedder (npm)

Dep Confusion

chai-as-predicted

MAL-2026-6393

Malicious code in chai-as-predicted (npm)

Typosquat

hs-locale-management

MAL-2026-6394

Malicious code in hs-locale-management (npm)

multer-express

MAL-2026-6387

Malicious code in multer-express (npm)

rapidsearch

MAL-2026-6388

Malicious code in rapidsearch (npm)

evmdotjs

MAL-2026-6386

Malicious code in evmdotjs (npm)

eth_accounts

MAL-2026-6385

Malicious code in eth_accounts (npm)

vercel-api-client

MAL-2026-6389

Malicious code in vercel-api-client (npm)