Supply Chain Incidents

MAL-2026-14262

Malicious code in pump-fun-skills (npm)

MAL-2026-14257

Malicious code in modsync (npm)

MAL-2026-14256

Malicious code in api-rs-tuils (npm)

MAL-2026-14259

Malicious code in ranux-dev (npm)

MAL-2026-14258

Malicious code in ranux-cloud (npm)

MAL-2026-14260

Malicious code in ranux-pro (npm)

MAL-2026-14253

Malicious code in react-dom-helpers (npm)

MAL-2026-14254

Malicious code in saaa9 (npm)

MAL-2026-14255

Malicious code in secp256k1-lib (npm)

MAL-2026-14249

Malicious code in localize-extract (npm)

MAL-2026-14250

Malicious code in luluking1 (npm)

MAL-2026-14252

Malicious code in npm-wold (npm)

MAL-2026-14251

Malicious code in ngsw-config (npm)

MAL-2026-14248

Malicious code in nice-utils-helper (npm)

MAL-2026-14243

Malicious code in flydev (npm)

MAL-2026-14241

Malicious code in dxrs-dos (npm)

MAL-2026-14240

Malicious code in dxr-dos (npm)

MAL-2026-14242

Malicious code in electro-session (npm)

MAL-2026-14247

Malicious code in magika-js (npm)

MAL-2026-14246

Malicious code in hardhat-hold (npm)

MAL-2026-14245

Malicious code in github-policy-bot (npm)

MAL-2026-14244

Malicious code in gemini-cli-a2a-server (npm)

MAL-2026-14239

Malicious code in gaarf-node-bq (npm)

MAL-2026-14238

Malicious code in gaarf-node (npm)