Supply Chain Incidents

MAL-2026-6183

Malicious code in @mep-exp/api-tools (npm)

MAL-2026-6184

Malicious code in @qlab/component-intelligence (npm)

MAL-2026-6192

Malicious code in nodepathbalance54 (npm)

MAL-2026-6185

Malicious code in conversa-sdk (npm)

MAL-2026-6186

Malicious code in electron-internal-utils (npm)

MAL-2026-6189

Malicious code in eyee (npm)

MAL-2026-6194

Malicious code in portloop (npm)

MAL-2026-6195

Malicious code in ts-linter-builders (npm)

MAL-2026-6188

Malicious code in eslint-helper-1 (npm)

MAL-2026-6190

Malicious code in mjs-eslint-helper (npm)

MAL-2026-6187

Malicious code in eslint-helper (npm)

MAL-2026-6182

Malicious code in fluent-panel-metrics (PyPI)

MAL-2026-6143

Malicious code in node-vfs-polyfill (npm)

MAL-2026-6142

Malicious code in db-connector-log (npm)

MAL-2026-6144

Malicious code in runtime-query (npm)

MAL-2026-6141

Malicious code in clx-cookie-signature (npm)

MAL-2026-6140

Malicious code in @httpactions/strict-uri-encode (npm)

MAL-2026-6139

Malicious code in @httpactions/encode-url (npm)

MAL-2026-6138

Malicious code in randpicker (PyPI)

MAL-2026-6121

Malicious code in @gbrlxvi/ts-project-lint (npm)

MAL-2026-6137

Malicious code in react-error-lint (npm)

MAL-2026-6135

Malicious code in ratelimitsucks (npm)

MAL-2026-6136

Malicious code in ratelimitsucks6 (npm)

MAL-2026-6130

Malicious code in abuden221 (npm)