Supply Chain Incidents

MAL-2026-5917

Malicious code in nottuff4 (npm)

MAL-2026-5914

Malicious code in nottuff15 (npm)

MAL-2026-5913

Malicious code in mastraqqq (npm)

MAL-2026-5921

Malicious code in proto-bin (npm)

MAL-2026-5911

Malicious code in utils-common-helpers (npm)

MAL-2026-5909

Malicious code in react-hook-use-debounce-throttle-12 (npm)

MAL-2026-5905

Malicious code in chai-plugin-helper (npm)

MAL-2026-5908

Malicious code in chain-chai-test (npm)

MAL-2026-5901

Malicious code in chai-as-polished (npm)

MAL-2026-5902

Malicious code in chai-as-tokenized (npm)

MAL-2026-5903

Malicious code in chai-guid (npm)

MAL-2026-5906

Malicious code in chai-plugin-kit (npm)

MAL-2026-5904

Malicious code in chai-plugin (npm)

MAL-2026-5907

Malicious code in chai-solidity-testkit (npm)

MAL-2026-5900

Malicious code in chai-as-decrypted (npm)

MAL-2026-5910

Malicious code in uidai_reusable_components (npm)

MAL-2026-5895

Malicious code in easyllmai (npm)

MAL-2026-5892

Malicious code in caspian-day-js (npm)

MAL-2026-5898

Malicious code in strict-engine-peer (npm)

MAL-2026-5896

Malicious code in jest-test-plugin-utils (npm)

MAL-2026-5897

Malicious code in noderzero (npm)

MAL-2026-5894

Malicious code in create-vercel-integration (npm)

MAL-2026-5890

Malicious code in @dsft/ft-utils (npm)

MAL-2026-5889

Malicious code in @dsft/ft-element (npm)