Supply Chain Incidents

MAL-2026-1115

Malicious code in chai-vest (npm)

MAL-2026-1116

Malicious code in js-nodecat (npm)

MAL-2026-1108

Malicious code in hapi-lint (npm)

MAL-2026-1102

Malicious code in bcryptance (npm)

MAL-2026-1101

Malicious code in argonist (npm)

MAL-2026-1113

Malicious code in typoriem (npm)

MAL-2026-1114

Malicious code in vitetest-lint (npm)

MAL-2026-1110

Malicious code in loadash-lint (npm)

MAL-2026-1106

Malicious code in expressjs-lint (npm)

MAL-2026-1112

Malicious code in sequelization (npm)

MAL-2026-1109

Malicious code in jsnwebapptoken (npm)

MAL-2026-1105

Malicious code in daytonjs (npm)

MAL-2026-1103

Malicious code in bee-quarl (npm)

MAL-2026-1111

Malicious code in mqttoken (npm)

MAL-2026-1104

Malicious code in bubble-core (npm)

MAL-2026-1107

Malicious code in formmiderable (npm)

MAL-2026-1100

Malicious code in ng-vzbootstrap (npm)

MAL-2026-1099

Malicious code in pyclogger (PyPI)

MAL-2026-1098

Malicious code in noteasonfnsource (PyPI)

MAL-2026-1097

Malicious code in botbooster (PyPI)

MAL-2026-1096

Malicious code in sketch-measure (npm)

MAL-2026-1095

Malicious code in jquery-display (npm)

MAL-2026-1094

Malicious code in dc-web-app (npm)

MAL-2026-1093

Malicious code in naughty-package (npm)