Supply Chain Incidents

MAL-2026-5551

Malicious code in @my_name_is_khn/express-security-tool-v1 (npm)

MAL-2026-5552

Malicious code in @my_name_is_khn/express-security-tool-v3 (npm)

MAL-2026-5550

Malicious code in @my_name_is_khn/express-security-tool (npm)

MAL-2026-5555

Malicious code in express-timer (npm)

MAL-2026-5554

Malicious code in express-self-destruct2 (npm)

MAL-2026-5553

Malicious code in express-self-destruct (npm)

MAL-2026-5542

Malicious code in india-map-react (npm)

MAL-2026-5541

Malicious code in @w2d/web-components (npm)

MAL-2026-5543

Malicious code in jailbreak-code (npm)

MAL-2026-5545

Malicious code in acme-widget-layout-utils (PyPI)

MAL-2026-5544

Malicious code in pocteszep (npm)

MAL-2026-5540

Malicious code in @monitoring-lib/error-tracking (npm)

MAL-2026-5539

Malicious code in mermaid-v11 (npm)

MAL-2026-5546

Malicious code in @common-stack/generate-plugin (npm)

MAL-2026-5537

Malicious code in @entos-ems/xerxes-client-js (npm)

MAL-2026-5538

Malicious code in hex-type (npm)

MAL-2026-5535

Malicious code in zer0onedate (npm)

MAL-2026-5536

Malicious code in zer0onedatetool (npm)

MAL-2026-5534

Malicious code in @thomlecter1122/lab-helper-test (npm)

MAL-2026-5533

Malicious code in @coze-common/chat-area (npm)

MAL-2026-5532

Malicious code in icinga (PyPI)

MAL-2026-5531

Malicious code in telegramlite (PyPI)

MAL-2026-5526

Malicious code in chai-check-error (npm)

MAL-2026-5527

Malicious code in check-error-util (npm)