MAL-2026-6419 Malicious code in leo-cache (npm)

The leo-cache npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

Malicious code in mike-zulu-qvkd (npm)

The package mike-zulu-qvkd was found to contain malicious code...

MAL-2025-24089 Malicious code in juno-eclipse-pegasus-cygnus (npm)

The package juno-eclipse-pegasus-cygnus was found to contain malicious code...

MAL-2025-13877 Malicious code in @zittertea/maiores-quis-repellat (npm)

The package @zittertea/maiores-quis-repellat was found to contain malicious code...