Supply Chain Incidents

MAL-2026-4402

Malicious code in @kyungseopk1m/holidays-kr (npm)

MAL-2026-4607

Malicious code in maxixy-cli (npm)

MAL-2026-4513

Malicious code in chai-as-tuned (npm)

MAL-2026-4421

Malicious code in @pulse-web-platform-core/scripts-loader (npm)

MAL-2026-4703

Malicious code in veteran (npm)

MAL-2026-4227

Malicious code in lognest (PyPI)

MAL-2026-4226

Malicious code in tailwindcss-themers (npm)

MAL-2026-4225

Malicious code in tailwindcss-theme-custom (npm)

MAL-2026-4509

Malicious code in celonix-otp-react (npm)

MAL-2026-4224

Malicious code in json-spectaculation (npm)

MAL-2026-4704

Malicious code in veteran-proxy (npm)

MAL-2026-4699

Malicious code in utils-mf (npm)

MAL-2026-4762

Malicious code in pgrayy-wasmtime (PyPI)

MAL-2026-4380

Malicious code in @dekuzxc/nexca (npm)

MAL-2026-4462

Malicious code in @vino.tian/vibe-kanban (npm)

MAL-2026-4405

Malicious code in @lokuma/cli (npm)

MAL-2026-4229

Malicious code in @luke-101141/nobody (npm)

MAL-2026-4584

Malicious code in ihubinternal (npm)

MAL-2026-4222

Malicious code in chai-as-afforded (npm)

MAL-2026-4223

Malicious code in tensor-compute (PyPI)

MAL-2026-4618

Malicious code in n8n-nodes-whatsapp-business-api-by-automations-builder (npm)

MAL-2026-4738

Malicious code in zest-product (npm)

MAL-2026-4492

Malicious code in autoheal-dev-cli (npm)

MAL-2026-4620

Malicious code in nikou-node (npm)