Supply Chain Incidents

MAL-2026-4400

Malicious code in @kmmao/happy-coder (npm)

MAL-2026-4603

Malicious code in lynx-keeper (npm)

MAL-2026-4431

Malicious code in @scp3500/openvl (npm)

MAL-2026-4551

Malicious code in encrata-cli (npm)

MAL-2026-4619

Malicious code in naileys (npm)

MAL-2026-4428

Malicious code in @rspack-debug/core (npm)

MAL-2026-4682

Malicious code in tango-app-api-trax (npm)

MAL-2026-4498

Malicious code in bitrix24-tasks-mcp-server (npm)

MAL-2026-4447

Malicious code in @spcsn/taro-cli (npm)

MAL-2026-4736

Malicious code in yessir-node (npm)

MAL-2026-4593

Malicious code in klaudius (npm)

MAL-2026-4676

Malicious code in svharness (npm)

MAL-2026-4574

Malicious code in gm-kilo (npm)

MAL-2026-4624

Malicious code in nw-demo (npm)

MAL-2026-4621

Malicious code in nolimit-x (npm)

MAL-2026-4647

Malicious code in prjct-cli (npm)

MAL-2026-4196

Malicious code in pinno-loggers (npm)

MAL-2026-4434

Malicious code in @semacode/cli (npm)

MAL-2026-4197

Malicious code in pretty-logger-utils (npm)

MAL-2026-4500

Malicious code in bricks-builder-mcp (npm)

MAL-2026-4601

Malicious code in local-mcp (npm)

MAL-2026-4200

Malicious code in art-template (npm)

MAL-2026-4698

Malicious code in use-context-selector-tony (npm)

MAL-2026-4640

Malicious code in pino-formatter (npm)