Supply Chain Incidents

MAL-2026-17235

Malicious code in items-validator (npm)

MAL-2026-17239

Malicious code in test-agency-assignment (npm)

MAL-2026-17240

Malicious code in aseitylab (PyPI)

MAL-2026-17230

Malicious code in llm-nebula (npm)

MAL-2026-17229

Malicious code in simple-date-formatter-new-12 (npm)

MAL-2026-17228

Malicious code in nebulaai-sdk (npm)

MAL-2026-17226

Malicious code in figlet-chalk-render (npm)

MAL-2026-17223

Malicious code in chalk-figlet (npm)

MAL-2026-17227

Malicious code in nebula-llm (npm)

MAL-2026-17224

Malicious code in fabric-asset-pipeline (npm)

MAL-2026-17225

Malicious code in fabric-render-bridge (npm)

MAL-2026-17216

Malicious code in img-to-native (npm)

MAL-2026-17218

Malicious code in native-runner (npm)

MAL-2026-17220

Malicious code in nebulajs-api (npm)

MAL-2026-17219

Malicious code in nebula-sdk (npm)

MAL-2026-17222

Malicious code in vite-plugin-crypto (npm)

MAL-2026-17221

Malicious code in tailwindcss-form-kit (npm)

MAL-2026-17217

Malicious code in my-skibidi (npm)

MAL-2026-17215

Malicious code in eslint-plugin-skywagon-web (npm)

MAL-2026-17214

Malicious code in git-en-boite-logging (npm)

MAL-2026-17315

Malicious code in godsplan (npm)

MAL-2026-17213

Malicious code in azure-langchain-example (PyPI)

MAL-2026-17212

Malicious code in wbnr-probe-visible-check (npm)

MAL-2026-17205

Malicious code in @wbnr/lottiefiles-loader (npm)