Supply Chain Incidents

MAL-2026-1465

Malicious code in hariprasath (npm)

MAL-2026-1483

Malicious code in @jaime9008/math-service (npm)

MAL-2026-1460

Malicious code in changelog-logger-wrapper (npm)

MAL-2026-1459

Malicious code in changelog-logger-utilities (npm)

MAL-2026-1463

Malicious code in polymarket-validator (npm)

MAL-2026-1464

Malicious code in pretty-changelog-logger (npm)

MAL-2026-1462

Malicious code in npm-demoo-1111 (npm)

MAL-2026-1461

Malicious code in npm-demo-1112 (npm)

MAL-2026-1486

Malicious code in trello-enterprises (npm)

MAL-2026-1485

Malicious code in react-refresh-update (npm)

MAL-2026-1484

Malicious code in internal-lib-vulnerable (npm)

MAL-2026-1487

Malicious code in vitest-config (npm)

MAL-2026-1458

Malicious code in @wealth-common/font (npm)

MAL-2026-1450

Malicious code in @myisrfn/baileys-mod (npm)

MAL-2026-1452

Malicious code in @sheniraid/libsignal-node (npm)

MAL-2026-1451

Malicious code in @sheniraid/baileys (npm)

MAL-2026-1441

Malicious code in big-numben (npm)

MAL-2026-1443

Malicious code in es-lint-builder (npm)

MAL-2026-1444

Malicious code in graphql-request-dom (npm)

MAL-2026-1442

Malicious code in bignumber-tool.js (npm)

MAL-2026-1447

Malicious code in testpoc01 (npm)

MAL-2026-1446

Malicious code in omhcsilence-bails (npm)

MAL-2026-1439

Malicious code in @omhc/libsignal-node (npm)

MAL-2026-1440

Malicious code in @vtim/xss-poc (npm)