Supply Chain Incidents

MAL-2026-12399

Malicious code in luluking3 (npm)

MAL-2026-12368

Malicious code in electrode-ota-ui-app (npm)

MAL-2026-12400

Malicious code in matlab-azure-devops-extension (npm)

MAL-2026-12398

Malicious code in luluking2 (npm)

MAL-2026-12379

Malicious code in fastify-client-bundler (npm)

MAL-2026-12315

Malicious code in @cryptosrvc/no-brainer-sdk (npm)

MAL-2026-12317

Malicious code in @cryptosrvc/shift-sdk-v4 (npm)

MAL-2026-12392

Malicious code in hyper-kube-config (npm)

MAL-2026-12416

Malicious code in poly-custom-api (npm)

MAL-2026-12337

Malicious code in akamaijs-sensor (npm)

MAL-2026-12427

Malicious code in remote_session_elements (npm)

MAL-2026-12356

Malicious code in content-publisher-sdks (npm)

MAL-2026-12359

Malicious code in crypto-javas (npm)

MAL-2026-12426

Malicious code in relativity-foundation-core (npm)

MAL-2026-12386

Malicious code in fundraiserservpp (npm)

MAL-2026-12471

Malicious code in streak-view-core (npm)

MAL-2026-12431

Malicious code in rpc-endpoint-rotator (npm)

MAL-2026-12348

Malicious code in chai-as-rendered (npm)

MAL-2026-12371

Malicious code in eth-codegen (npm)

MAL-2026-12497

Malicious code in vscode-designer-14 (npm)

MAL-2026-12498

Malicious code in wagmi-react (npm)

MAL-2026-12357

Malicious code in cors-security (npm)

MAL-2026-12436

Malicious code in shift-sdk-v5 (npm)

MAL-2026-12424

Malicious code in react-native-ui-message (npm)