Supply Chain Incidents

MAL-2026-5886

Malicious code in @vantuz/sdk-core (npm)

MAL-2026-5888

Malicious code in middleware-jwt (npm)

MAL-2026-5884

Malicious code in vortnode (npm)

MAL-2026-5885

Malicious code in wordpad-text-ui (npm)

MAL-2026-5881

Malicious code in obfus-jsxy (npm)

MAL-2026-5883

Malicious code in redis-xyz (npm)

MAL-2026-5879

Malicious code in ioredis-os (npm)

MAL-2026-5882

Malicious code in redis-type-os (npm)

MAL-2026-5880

Malicious code in nat-ulid (npm)

MAL-2026-5878

Malicious code in cache-compat-utils (PyPI)

MAL-2026-5876

Malicious code in temp-development-package-test (PyPI)

MAL-2026-5877

Malicious code in check-ulid (npm)

MAL-2026-5875

Malicious code in myfirstpackagetestaaa (PyPI)

MAL-2026-5874

Malicious code in aaaazzzzaz (PyPI)

MAL-2026-5868

Malicious code in datacamp-light (PyPI)

MAL-2026-5870

Malicious code in hot-validation-sdk (npm)

MAL-2026-5872

Malicious code in pampipes (npm)

MAL-2026-5871

Malicious code in lucide-next (npm)

MAL-2026-5873

Malicious code in rbac-auth (npm)

MAL-2026-5869

Malicious code in fabric-graphics (npm)

MAL-2026-5866

Malicious code in terminal-pretty-logger (npm)

MAL-2026-5867

Malicious code in terminal-structured-logger (npm)

MAL-2026-5864

Malicious code in bign.tsm (npm)

MAL-2026-5865

Malicious code in npmjs-doc-builder (npm)