Supply Chain Incidents

MAL-2026-6104

Malicious code in @ncurran/sandbox-recon-7c4e1a (npm)

MAL-2026-6115

Malicious code in npm-sandbox-research-a1b2 (npm)

MAL-2026-6102

Malicious code in @ncurran/dc-selftest-33afb7 (npm)

MAL-2026-6116

Malicious code in npm-sandbox-research-f1g2 (npm)

MAL-2026-6103

Malicious code in @ncurran/dc-selftest-ba0ad4 (npm)

MAL-2026-6108

Malicious code in @ncurran/sandbox-recon-sys-5f1b (npm)

MAL-2026-6106

Malicious code in @ncurran/sandbox-recon-9b2d4f (npm)

MAL-2026-6110

Malicious code in @ncurran/sandbox-recon-uac-4e7c (npm)

MAL-2026-6107

Malicious code in @ncurran/sandbox-recon-sys-5b2c (npm)

MAL-2026-6105

Malicious code in @ncurran/sandbox-recon-880538 (npm)

MAL-2026-6109

Malicious code in @ncurran/sandbox-recon-sys-6a3f (npm)

MAL-2026-6088

Malicious code in vite-common-utils (npm)

MAL-2026-6087

Malicious code in uol-simple-api-futebol (npm)

MAL-2026-6086

Malicious code in ai-chat-helper (npm)

MAL-2026-6085

Malicious code in @hotcappuccino/nodepull (npm)

MAL-2026-6084

Malicious code in @array-util/nodepull (npm)

MAL-2026-6078

Malicious code in pino-slite (npm)

MAL-2026-6079

Malicious code in set-proto-chain (npm)

MAL-2026-6082

Malicious code in dotenv-sync (PyPI)

MAL-2026-6081

Malicious code in disksweep (PyPI)

MAL-2026-6077

Malicious code in ebpf-tracker-action (npm)

MAL-2026-6083

Malicious code in syncagents (PyPI)

MAL-2026-6080

Malicious code in boardflow (PyPI)

MAL-2026-6075

Malicious code in opt-archetype-check (npm)