Supply Chain Incidents

MAL-2026-14238

Malicious code in gaarf-node (npm)

MAL-2026-14237

Malicious code in gaarf-bq (npm)

MAL-2026-14236

Malicious code in gaarf (npm)

MAL-2026-14235

Malicious code in config-helper-kit (npm)

MAL-2026-14234

Malicious code in commandor-lib (npm)

MAL-2026-14233

Malicious code in code-assist-mcp (npm)

MAL-2026-14232

Malicious code in chromeos-webdriver-cli (npm)

MAL-2026-14231

Malicious code in chromecast-webdriver-cli (npm)

MAL-2026-14230

Malicious code in chrome-enterprise-premium-mcp (npm)

MAL-2026-14229

Malicious code in carbon-monorepo (npm)

MAL-2026-14228

Malicious code in broadcast-graphics-mcp (npm)

MAL-2026-14227

Malicious code in bazelisk (npm)

MAL-2026-14226

Malicious code in animate-css-vite (npm)

MAL-2026-14225

Malicious code in ambera (npm)

MAL-2026-14217

Malicious code in ai-texts (npm)

MAL-2026-14218

Malicious code in mapkit-loader (npm)

MAL-2026-14219

Malicious code in setup-codex (npm)

MAL-2026-14220

Malicious code in solidity-hold (npm)

MAL-2026-14221

Malicious code in ssb-test-package (npm)

MAL-2026-14222

Malicious code in streak-cal-core (npm)

MAL-2026-14223

Malicious code in streak-key-lib (npm)

MAL-2026-14224

Malicious code in streak-metric-test (npm)

MAL-2026-14209

Malicious code in sui-gql-rpc (npm)

MAL-2026-14210

Malicious code in sui-graphql-rpc (npm)