Supply Chain Incidents

MAL-2026-5930

Malicious code in bubblestr (npm)

tw-theme-kit

MAL-2026-5935

Malicious code in tw-theme-kit (npm)

vite-config-field

MAL-2026-5936

Malicious code in vite-config-field (npm)

react-vite-assert

MAL-2026-5933

Malicious code in react-vite-assert (npm)

ssr-auth-sync

MAL-2026-5934

Malicious code in ssr-auth-sync (npm)

package-uploader

MAL-2026-5932

Malicious code in package-uploader (npm)

mci-sdk

MAL-2026-5931

Malicious code in mci-sdk (npm)

chai-test-mocks

MAL-2026-5928

Malicious code in chai-test-mocks (npm)

aillmgen

MAL-2026-5927

Malicious code in aillmgen (npm)

@kalipto/local

MAL-2026-5922

Malicious code in @kalipto/local (npm)

test-copppss

MAL-2026-5926

Malicious code in test-copppss (npm)

@welcome-onboarding-web/mobile-focus-account-beta-merging

MAL-2026-5923

Malicious code in @welcome-onboarding-web/mobile-focus-account-beta-merging (npm)

binproto

MAL-2026-5924

Malicious code in binproto (npm)

motion-lib

MAL-2026-5925

Malicious code in motion-lib (npm)

js-digest

MAL-2026-5912

Malicious code in js-digest (npm)

pretie_x2

MAL-2026-5920

Malicious code in pretie_x2 (npm)

pretie_x1

MAL-2026-5919

Malicious code in pretie_x1 (npm)

nottuff7

MAL-2026-5918

Malicious code in nottuff7 (npm)

nottuff23

MAL-2026-5915

Malicious code in nottuff23 (npm)

nottuff25

MAL-2026-5916

Malicious code in nottuff25 (npm)

nottuff4

MAL-2026-5917

Malicious code in nottuff4 (npm)

nottuff15

MAL-2026-5914

Malicious code in nottuff15 (npm)

mastraqqq

MAL-2026-5913

Malicious code in mastraqqq (npm)

Typosquat

proto-bin

MAL-2026-5921

Malicious code in proto-bin (npm)