Supply Chain Incidents

MAL-2026-16148

Malicious code in noblox-asset.js (npm)

MAL-2026-16150

Malicious code in postgreesqlhelper (npm)

MAL-2026-16151

Malicious code in sql-limit-enforcer (npm)

MAL-2026-16147

Malicious code in n8n-nodes-sysdiag (npm)

MAL-2026-16149

Malicious code in os-info-meeb322k (npm)

MAL-2026-16152

Malicious code in strapi-plugin-os-info-meeb322k (npm)

MAL-2026-16153

Malicious code in web-main (npm)

MAL-2026-16146

Malicious code in @aiwfm/communitywfm.scripts.api (npm)

MAL-2026-16145

Malicious code in concierge-sdk (npm)

MAL-2026-16144

Malicious code in app-rrhh (npm)

MAL-2026-16161

Malicious code in meraz-project-tracker (npm)

MAL-2026-16157

Malicious code in @merazmz/project-tracker (npm)

MAL-2026-16160

Malicious code in lpulogin (npm)

MAL-2026-16159

Malicious code in dilxztech (npm)

MAL-2026-16171

Malicious code in @biz44/process-runtime-utils (npm)

MAL-2026-16172

Malicious code in @biz44/runtime-utils (npm)

MAL-2026-16201

Malicious code in webpackbootstrap5 (npm)

MAL-2026-16200

Malicious code in @zaka13/thing (npm)

MAL-2026-16202

Malicious code in webpackbootstrapscripts (npm)

MAL-2026-16203

Malicious code in faiss-cpu-avx512 (PyPI)

MAL-2026-16143

Malicious code in chroma-client (PyPI)

MAL-2026-16168

Malicious code in @biz44/id79-client (npm)

MAL-2026-16166

Malicious code in @biz44/id12-client (npm)

MAL-2026-16169

Malicious code in @biz44/id95-client (npm)