Supply Chain Incidents

MAL-2026-16404

Malicious code in sysverify (npm)

MAL-2026-16400

Malicious code in ndmcjcxiebysfdb (npm)

MAL-2026-16401

Malicious code in ndmckauxuoincv (npm)

MAL-2026-16391

Malicious code in cloudndmcedu (npm)

MAL-2026-16402

Malicious code in ndmcmsujey (npm)

MAL-2026-16399

Malicious code in lufxchwmxwyps (npm)

MAL-2026-16396

Malicious code in fdhcxvnwhjiofv (npm)

MAL-2026-16397

Malicious code in kambxjowhdsgyw (npm)

MAL-2026-16398

Malicious code in luftmvfiwgxydes (npm)

MAL-2026-16390

Malicious code in oracle-redis (npm)

MAL-2026-16389

Malicious code in noverojava (npm)

MAL-2026-16388

Malicious code in nodetokyo (npm)

MAL-2026-16542

Malicious code in zeal-utils (npm)

MAL-2026-16541

Malicious code in zeal-util-hooks (npm)

MAL-2026-16540

Malicious code in style-class-utils (npm)

MAL-2026-16538

Malicious code in spark-rpc (npm)

MAL-2026-16539

Malicious code in speaker_tagging_media_player (npm)

MAL-2026-16537

Malicious code in spark-common (npm)

MAL-2026-16536

Malicious code in mx-www-locales-common (npm)

MAL-2026-16535

Malicious code in mercuriusdream-oidc-replay-probe (npm)

MAL-2026-16534

Malicious code in halali-sample (npm)

MAL-2026-16533

Malicious code in exodus-firestore-synchronize (npm)

MAL-2026-16532

Malicious code in @yuva2210/poc-depconf (npm)

MAL-2026-16531

Malicious code in @yuva2210/okx-poc-preinstall (npm)