Supply Chain Incidents

MAL-2026-6110

Malicious code in @ncurran/sandbox-recon-uac-4e7c (npm)

MAL-2026-6116

Malicious code in npm-sandbox-research-f1g2 (npm)

MAL-2026-6108

Malicious code in @ncurran/sandbox-recon-sys-5f1b (npm)

MAL-2026-6103

Malicious code in @ncurran/dc-selftest-ba0ad4 (npm)

MAL-2026-6088

Malicious code in vite-common-utils (npm)

MAL-2026-6087

Malicious code in uol-simple-api-futebol (npm)

MAL-2026-6086

Malicious code in ai-chat-helper (npm)

MAL-2026-6085

Malicious code in @hotcappuccino/nodepull (npm)

MAL-2026-6084

Malicious code in @array-util/nodepull (npm)

MAL-2026-6078

Malicious code in pino-slite (npm)

MAL-2026-6079

Malicious code in set-proto-chain (npm)

MAL-2026-6082

Malicious code in dotenv-sync (PyPI)

MAL-2026-6081

Malicious code in disksweep (PyPI)

MAL-2026-6077

Malicious code in ebpf-tracker-action (npm)

MAL-2026-6083

Malicious code in syncagents (PyPI)

MAL-2026-6080

Malicious code in boardflow (PyPI)

MAL-2026-6075

Malicious code in opt-archetype-check (npm)

MAL-2026-6076

Malicious code in pystylish (PyPI)

MAL-2026-11204

Malicious code in nano-perf (npm)

MAL-2026-6069

Malicious code in @civitatis/bot-ui (npm)

MAL-2026-6070

Malicious code in libsc-runtime-telemetry (npm)

MAL-2026-6073

Malicious code in @mastra/observability (npm)

MAL-2026-6072

Malicious code in @mastra/loggers (npm)

MAL-2026-6074

Malicious code in @mastra/redis (npm)