Supply Chain Incidents

MAL-2026-1198

Malicious code in flycord (npm)

MAL-2026-1185

Malicious code in @bookings.microsoft.com/s (npm)

MAL-2026-1199

Malicious code in fps-logger (npm)

MAL-2026-1187

Malicious code in @twilio-client/twilio-client (npm)

MAL-2026-1183

Malicious code in rbxm-utils (npm)

MAL-2026-1184

Malicious code in web-prompt (npm)

MAL-2026-1182

Malicious code in bigmathutils-v2 (npm)

MAL-2026-1180

Malicious code in webnoch (npm)

MAL-2026-1174

Malicious code in ethersnode (npm)

MAL-2026-1181

Malicious code in webnochs (npm)

MAL-2026-1175

Malicious code in ethersnog (npm)

MAL-2026-1173

Malicious code in eslint-verify-plugin (npm)

MAL-2026-1176

Malicious code in gabby-types (npm)

MAL-2026-1165

Malicious code in @global-dax-ad-platform/dax-components (npm)

MAL-2026-1166

Malicious code in @global-dax-ad-platform/dax-hooks (npm)

MAL-2026-1168

Malicious code in @global-dax-ad-platform/dax-styles (npm)

MAL-2026-1167

Malicious code in @global-dax-ad-platform/dax-modules (npm)

MAL-2026-1169

Malicious code in @global-dax-ad-platform/dax-types (npm)

MAL-2026-1170

Malicious code in @global-dax-ad-platform/dax-utils (npm)

MAL-2026-1178

Malicious code in hiagentevilmcp (npm)

MAL-2026-1172

Malicious code in @zakhaevv/envai (npm)

MAL-2026-1171

Malicious code in @snazaah/davey (npm)

MAL-2026-1177

Malicious code in graph-dynamic (npm)

MAL-2026-1179

Malicious code in magala (npm)