Supply Chain Incidents

MAL-2026-6111

Malicious code in @rafaelsene01/agent-flow (npm)

MAL-2026-6098

Malicious code in stackus (npm)

MAL-2026-6093

Malicious code in jwtmode (npm)

MAL-2026-6096

Malicious code in requests-middleware (npm)

MAL-2026-6097

Malicious code in roblox-api-client (npm)

MAL-2026-6113

Malicious code in intquery (npm)

MAL-2026-6095

Malicious code in oem-agentic-shared (npm)

MAL-2026-6091

Malicious code in datacamp-light (npm)

MAL-2026-6090

Malicious code in data-utils-bcf2 (npm)

MAL-2026-6099

Malicious code in stream-read-35cf (npm)

MAL-2026-6112

Malicious code in data-utils-d703 (npm)

MAL-2026-6101

Malicious code in type-check-816d (npm)

MAL-2026-6094

Malicious code in metrics-probe-f256 (npm)

MAL-2026-6089

Malicious code in color-utils-dee0 (npm)

MAL-2026-6092

Malicious code in fmt-helpers-794b (npm)

MAL-2026-6114

Malicious code in metrics-probe-88ad (npm)

MAL-2026-6100

Malicious code in string-tools-be6c (npm)

MAL-2026-6109

Malicious code in @ncurran/sandbox-recon-sys-6a3f (npm)

MAL-2026-6107

Malicious code in @ncurran/sandbox-recon-sys-5b2c (npm)

MAL-2026-6104

Malicious code in @ncurran/sandbox-recon-7c4e1a (npm)

MAL-2026-6105

Malicious code in @ncurran/sandbox-recon-880538 (npm)

MAL-2026-6115

Malicious code in npm-sandbox-research-a1b2 (npm)

MAL-2026-6102

Malicious code in @ncurran/dc-selftest-33afb7 (npm)

MAL-2026-6110

Malicious code in @ncurran/sandbox-recon-uac-4e7c (npm)