Supply Chain Incidents

MAL-2026-17420

Malicious code in online-header (npm)

MAL-2026-17419

Malicious code in friendly-tools (PyPI)

MAL-2026-17417

Malicious code in beautifytext (PyPI)

MAL-2026-17416

Malicious code in friendly-greeting-tools (PyPI)

MAL-2026-17415

Malicious code in com.epi.e2e_test (npm)

MAL-2026-17339

Malicious code in reactjs-risk (npm)

MAL-2026-17334

Malicious code in @cat-gen/material (npm)

MAL-2026-17333

Malicious code in @cat-gen/materia (npm)

MAL-2026-17335

Malicious code in @firelordzuka/pulse-poc (npm)

MAL-2026-17338

Malicious code in link-status-page (npm)

MAL-2026-17337

Malicious code in link-age-great (npm)

MAL-2026-17336

Malicious code in @redman89405/my-module (npm)

MAL-2026-17332

Malicious code in runhelper (npm)

MAL-2026-17331

Malicious code in iban-validator-js (npm)

MAL-2026-17329

Malicious code in focaleys (npm)

MAL-2026-17328

Malicious code in fca-raihan (npm)

MAL-2026-17327

Malicious code in exiouss (npm)

MAL-2026-17330

Malicious code in imgbundle (npm)

MAL-2026-17322

Malicious code in contoso-login-sim-loader (npm)

MAL-2026-17320

Malicious code in cdn-img-fetch (npm)

MAL-2026-17325

Malicious code in cleanup-string (PyPI)

MAL-2026-17323

Malicious code in cortana-md-engine (npm)

MAL-2026-17321

Malicious code in chaienv (npm)

MAL-2026-17324

Malicious code in dotenv-preflight (npm)