Supply Chain Incidents

MAL-2026-6762

Malicious code in node-pino (npm)

MAL-2026-6699

Malicious code in ecto-corsair-flag-7kq3mz (npm)

MAL-2026-6700

Malicious code in module-index-cache (npm)

MAL-2026-6701

Malicious code in ripshakti (npm)

MAL-2026-6697

Malicious code in @sudoughnym/enviro-demo (npm)

MAL-2026-6696

Malicious code in @businessapp-microsites/apis (npm)

MAL-2026-6698

Malicious code in cursed-modules (npm)

MAL-2026-6687

Malicious code in procwire (npm)

MAL-2026-6681

Malicious code in brock-react-alerts (npm)

MAL-2026-6685

Malicious code in quoting (npm)

MAL-2026-6680

Malicious code in brock-loader (npm)

MAL-2026-6679

Malicious code in agent-starter-pack (npm)

MAL-2026-6684

Malicious code in postcss-property-rollup (npm)

MAL-2026-6686

Malicious code in setup-cicd (npm)

MAL-2026-6682

Malicious code in confluent-kafka-javascript (npm)

MAL-2026-6683

Malicious code in nbmolviz-js (npm)

MAL-2026-6677

Malicious code in ts-lint-builders-v2.1 (npm)

MAL-2026-6678

Malicious code in ts-linting-builder (npm)

MAL-2026-6675

Malicious code in rs-biginteger (npm)

MAL-2026-6676

Malicious code in terminal-prettier (npm)

MAL-2026-6702

Malicious code in vue-demi-fix (npm)

MAL-2026-6674

Malicious code in ripshakti1 (npm)

MAL-2026-6673

Malicious code in anthropic-toolkit (npm)

MAL-2026-6691

Malicious code in polymarket-clob-maths (npm)