Supply Chain Incidents

MAL-2026-550

Malicious code in cdnhost (npm)

MAL-2026-549

Malicious code in blockchain-helper-lib (npm)

MAL-2026-548

Malicious code in tabletas (PyPI)

MAL-2026-547

Malicious code in solhint-plugin-hyperlane (PyPI)

MAL-2026-527

Malicious code in @santandergroup-uk/edgehome-components (npm)

MAL-2026-534

Malicious code in internallib_v828 (npm)

MAL-2026-535

Malicious code in knex.js (npm)

MAL-2026-541

Malicious code in pump.js (npm)

MAL-2026-536

Malicious code in morgan.js (npm)

MAL-2026-537

Malicious code in mysql2.js (npm)

MAL-2026-542

Malicious code in stylus.js (npm)

MAL-2026-530

Malicious code in grepleaks (npm)

MAL-2026-531

Malicious code in hackerxhj (npm)

MAL-2026-545

Malicious code in testxhjhka (npm)

MAL-2026-544

Malicious code in testxhjhk (npm)

MAL-2026-546

Malicious code in xhjxhjhiagent (npm)

MAL-2026-533

Malicious code in hiagentxhjrceme (npm)

MAL-2026-532

Malicious code in hiagentxhjrce (npm)

MAL-2026-526

Malicious code in @row-components/pricing-embedded-sui (npm)

MAL-2026-543

Malicious code in tailwind-components-cli (npm)

MAL-2026-540

Malicious code in n8n-nodes-xkwqpzrt-jmflhvbn-dsyocgxwmkelpt (npm)

MAL-2026-538

Malicious code in n8n-nodes-gasdhgfuy-rejerw-ytjsadx (npm)

MAL-2026-539

Malicious code in n8n-nodes-gg-udhasudsh-hgjkhg-official (npm)

MAL-2026-529

Malicious code in fileupload-core (npm)