Supply Chain Incidents

MAL-2026-6537

Malicious code in gptmini (npm)

MAL-2026-6535

Malicious code in disksweep (npm)

MAL-2026-6531

Malicious code in @appupdate/cdn-sync (npm)

MAL-2026-6534

Malicious code in react-dynammic-table-component (npm)

MAL-2026-6533

Malicious code in react-dynamic-table-compenent (npm)

MAL-2026-6532

Malicious code in chai-as-assured (npm)

MAL-2026-6530

Malicious code in xrblocks-remote-control (npm)

MAL-2026-6527

Malicious code in @immobiliarelabs/backstage-plugin-gitlab-backend (npm)

MAL-2026-6529

Malicious code in @immobiliarelabs/backstage-plugin-ldap-auth-backend (npm)

MAL-2026-6528

Malicious code in @immobiliarelabs/backstage-plugin-ldap-auth (npm)

MAL-2026-6526

Malicious code in @immobiliarelabs/backstage-plugin-gitlab (npm)

MAL-2026-6521

Malicious code in @carvana.authentication-flows/shared (npm)

MAL-2026-6523

Malicious code in express-plugin (npm)

MAL-2026-6524

Malicious code in ts-einkle (npm)

MAL-2026-6525

Malicious code in ts-einkle-slot (npm)

MAL-2026-6522

Malicious code in @epsteinlovekids483/crossmint-wallets-sdk-pentest (npm)

MAL-2026-6519

Malicious code in react-icon-svgs (npm)

MAL-2026-6520

Malicious code in rollup-plugin-polyfill-connect (npm)

MAL-2026-6517

Malicious code in ai-node-agent (npm)

MAL-2026-6518

Malicious code in ai-node-relay (npm)

MAL-2026-6516

Malicious code in inlifegram (PyPI)

MAL-2026-6515

Malicious code in sqligen (PyPI)

MAL-2026-6513

Malicious code in dtxto1ols (npm)

MAL-2026-6514

Malicious code in dtxtools (npm)