Supply Chain Incidents

MAL-2026-6090

Malicious code in data-utils-bcf2 (npm)

MAL-2026-6099

Malicious code in stream-read-35cf (npm)

MAL-2026-6101

Malicious code in type-check-816d (npm)

MAL-2026-6100

Malicious code in string-tools-be6c (npm)

MAL-2026-6112

Malicious code in data-utils-d703 (npm)

MAL-2026-6094

Malicious code in metrics-probe-f256 (npm)

MAL-2026-6089

Malicious code in color-utils-dee0 (npm)

MAL-2026-6114

Malicious code in metrics-probe-88ad (npm)

MAL-2026-6092

Malicious code in fmt-helpers-794b (npm)

MAL-2026-6105

Malicious code in @ncurran/sandbox-recon-880538 (npm)

MAL-2026-6104

Malicious code in @ncurran/sandbox-recon-7c4e1a (npm)

MAL-2026-6107

Malicious code in @ncurran/sandbox-recon-sys-5b2c (npm)

MAL-2026-6109

Malicious code in @ncurran/sandbox-recon-sys-6a3f (npm)

MAL-2026-6102

Malicious code in @ncurran/dc-selftest-33afb7 (npm)

MAL-2026-6103

Malicious code in @ncurran/dc-selftest-ba0ad4 (npm)

MAL-2026-6116

Malicious code in npm-sandbox-research-f1g2 (npm)

MAL-2026-6108

Malicious code in @ncurran/sandbox-recon-sys-5f1b (npm)

MAL-2026-6106

Malicious code in @ncurran/sandbox-recon-9b2d4f (npm)

MAL-2026-6115

Malicious code in npm-sandbox-research-a1b2 (npm)

MAL-2026-6110

Malicious code in @ncurran/sandbox-recon-uac-4e7c (npm)

MAL-2026-6088

Malicious code in vite-common-utils (npm)

MAL-2026-6087

Malicious code in uol-simple-api-futebol (npm)

MAL-2026-6086

Malicious code in ai-chat-helper (npm)

MAL-2026-6085

Malicious code in @hotcappuccino/nodepull (npm)