Supply Chain Incidents

MAL-2026-5205

Malicious code in @forjacms/analytics (npm)

MAL-2026-5256

Malicious code in executable-stories-playwright (npm)

MAL-2026-5217

Malicious code in autotel-cloudflare (npm)

MAL-2026-5195

Malicious code in @contaazul/n8n-nodes-contaazul (npm)

MAL-2026-5262

Malicious code in node-env-resolver (npm)

MAL-2026-5209

Malicious code in @vapi-ai/server-sdk (npm)

MAL-2026-5190

Malicious code in hbsig (npm)

MAL-2026-5191

Malicious code in wdb-core (npm)

MAL-2026-5189

Malicious code in arjson (npm)

MAL-2026-5194

Malicious code in yaml-javascript (npm)

MAL-2026-5192

Malicious code in weavedb-contracts (npm)

MAL-2026-5193

Malicious code in javascript-yaml (npm)

MAL-2026-5188

Malicious code in hello244a (npm)

GHSA-jpvj-wpmj-h7rv

Supply chain compromise via malicious @cap-js/openapi

MAL-2026-5187

Malicious code in supabase (npm)

MAL-2026-5186

Malicious code in autotel-terminal (npm)

MAL-2026-5185

Malicious code in @jagreehal/workflow (npm)

MAL-2026-5184

Malicious code in sf-silly-goose-requests (PyPI)

MAL-2026-5364

Malicious code in cms-store-ren (npm)

MAL-2026-5183

Malicious code in hpe-glcp-automation-lib (PyPI)

MAL-2026-5180

Malicious code in nodemon-webpatch (npm)

MAL-2026-5179

Malicious code in chai-midpatch (npm)

MAL-2026-5181

Malicious code in tronlabpy3 (PyPI)

MAL-2026-5177

Malicious code in fia-signals (PyPI)