Supply Chain Incidents

MAL-2026-5911

Malicious code in utils-common-helpers (npm)

react-hook-use-debounce-throttle-12

MAL-2026-5909

Malicious code in react-hook-use-debounce-throttle-12 (npm)

chai-plugin-helper

MAL-2026-5905

Malicious code in chai-plugin-helper (npm)

chain-chai-test

MAL-2026-5908

Malicious code in chain-chai-test (npm)

chai-as-polished

MAL-2026-5901

Malicious code in chai-as-polished (npm)

chai-as-tokenized

MAL-2026-5902

Malicious code in chai-as-tokenized (npm)

chai-guid

MAL-2026-5903

Malicious code in chai-guid (npm)

chai-plugin-kit

MAL-2026-5906

Malicious code in chai-plugin-kit (npm)

chai-plugin

MAL-2026-5904

Malicious code in chai-plugin (npm)

chai-solidity-testkit

MAL-2026-5907

Malicious code in chai-solidity-testkit (npm)

chai-as-decrypted

MAL-2026-5900

Malicious code in chai-as-decrypted (npm)

uidai_reusable_components

MAL-2026-5910

Malicious code in uidai_reusable_components (npm)

Dep Confusion

easyllmai

MAL-2026-5895

Malicious code in easyllmai (npm)

caspian-day-js

MAL-2026-5892

Malicious code in caspian-day-js (npm)

strict-engine-peer

MAL-2026-5898

Malicious code in strict-engine-peer (npm)

Dep Confusion

jest-test-plugin-utils

MAL-2026-5896

Malicious code in jest-test-plugin-utils (npm)

noderzero

MAL-2026-5897

Malicious code in noderzero (npm)

create-vercel-integration

MAL-2026-5894

Malicious code in create-vercel-integration (npm)

@dsft/ft-utils

MAL-2026-5890

Malicious code in @dsft/ft-utils (npm)

@dsft/ft-element

MAL-2026-5889

Malicious code in @dsft/ft-element (npm)

Dep Confusion

stripe-cli-init-plugin

MAL-2026-5899

Malicious code in stripe-cli-init-plugin (npm)

conducts

MAL-2026-5887

Malicious code in conducts (npm)

atlassian-forge-skills

MAL-2026-5891

Malicious code in atlassian-forge-skills (npm)

claude-jar

MAL-2026-5893

Malicious code in claude-jar (npm)