Supply Chain Incidents

MAL-2026-6190

Malicious code in mjs-eslint-helper (npm)

eslint-helper

MAL-2026-6187

Malicious code in eslint-helper (npm)

fluent-panel-metrics

PyPI

MAL-2026-6182

Malicious code in fluent-panel-metrics (PyPI)

node-vfs-polyfill

MAL-2026-6143

Malicious code in node-vfs-polyfill (npm)

db-connector-log

MAL-2026-6142

Malicious code in db-connector-log (npm)

runtime-query

MAL-2026-6144

Malicious code in runtime-query (npm)

clx-cookie-signature

MAL-2026-6141

Malicious code in clx-cookie-signature (npm)

@httpactions/strict-uri-encode

MAL-2026-6140

Malicious code in @httpactions/strict-uri-encode (npm)

@httpactions/encode-url

MAL-2026-6139

Malicious code in @httpactions/encode-url (npm)

randpicker

PyPI

MAL-2026-6138

Malicious code in randpicker (PyPI)

Backdoor

@gbrlxvi/ts-project-lint

MAL-2026-6121

Malicious code in @gbrlxvi/ts-project-lint (npm)

react-error-lint

MAL-2026-6137

Malicious code in react-error-lint (npm)

ratelimitsucks

MAL-2026-6135

Malicious code in ratelimitsucks (npm)

ratelimitsucks6

MAL-2026-6136

Malicious code in ratelimitsucks6 (npm)

abuden22

MAL-2026-6129

Malicious code in abuden22 (npm)

abuden221

MAL-2026-6130

Malicious code in abuden221 (npm)

abuden218

MAL-2026-6128

Malicious code in abuden218 (npm)

panrouter-admin

MAL-2026-6134

Malicious code in panrouter-admin (npm)

panrouter

MAL-2026-6133

Malicious code in panrouter (npm)

@onum-releases/utils

MAL-2026-6127

Malicious code in @onum-releases/utils (npm)

@onum-releases/shared-components

MAL-2026-6126

Malicious code in @onum-releases/shared-components (npm)

@onum-releases/ixel

MAL-2026-6124

Malicious code in @onum-releases/ixel (npm)

@onum-releases/sdk

MAL-2026-6125

Malicious code in @onum-releases/sdk (npm)

@onum-releases/auth

MAL-2026-6123

Malicious code in @onum-releases/auth (npm)