Supply Chain Incidents

MAL-2026-6217

Malicious code in aikaf788812 (npm)

Backdoor

create-mono-package

MAL-2026-6222

Malicious code in create-mono-package (npm)

@chunklab/hexparse

MAL-2026-6214

Malicious code in @chunklab/hexparse (npm)

@bytemend/mfebus

MAL-2026-6213

Malicious code in @bytemend/mfebus (npm)

@briskforge/envcheck

MAL-2026-6212

Malicious code in @briskforge/envcheck (npm)

@apexcraft/nano-key

MAL-2026-6210

Malicious code in @apexcraft/nano-key (npm)

@apiwizards/auth-middleware

MAL-2026-6211

Malicious code in @apiwizards/auth-middleware (npm)

@antoncarlos1/nodelamp

MAL-2026-6209

Malicious code in @antoncarlos1/nodelamp (npm)

chai-assert-kit

MAL-2026-6221

Malicious code in chai-assert-kit (npm)

chai-as-attested

MAL-2026-6218

Malicious code in chai-as-attested (npm)

chai-as-uphelded

MAL-2026-6220

Malicious code in chai-as-uphelded (npm)

new-mjs-eslint

MAL-2026-6226

Malicious code in new-mjs-eslint (npm)

mjs-eslint

MAL-2026-6223

Malicious code in mjs-eslint (npm)

new-eslint-1

MAL-2026-6225

Malicious code in new-eslint-1 (npm)

new-eslint

MAL-2026-6224

Malicious code in new-eslint (npm)

Typosquat

new-ts-helper

MAL-2026-6227

Malicious code in new-ts-helper (npm)

chai-as-forgeted

MAL-2026-6219

Malicious code in chai-as-forgeted (npm)

fastercoding

PyPI

MAL-2026-6208

Malicious code in fastercoding (PyPI)

fastercode

PyPI

MAL-2026-6206

Malicious code in fastercode (PyPI)

shoaib-done-pack

PyPI

MAL-2026-6207

Malicious code in shoaib-done-pack (PyPI)

ts-esys

MAL-2026-6205

Malicious code in ts-esys (npm)

ts-ecro-helper

MAL-2026-6204

Malicious code in ts-ecro-helper (npm)

mongoose-jsonify

MAL-2026-6203

Malicious code in mongoose-jsonify (npm)

eth-util

MAL-2026-6201

Malicious code in eth-util (npm)