Supply Chain Incidents

MAL-2026-15689

Malicious code in lil-swisgom-hlepers (npm)

MAL-2026-15688

Malicious code in leaflet-opencage-geocoding (npm)

MAL-2026-14423

Malicious code in @medisend/shared (npm)

MAL-2026-14427

Malicious code in chai-as-mno (npm)

MAL-2026-14421

Malicious code in @medisend/auth (npm)

MAL-2026-14422

Malicious code in @medisend/core (npm)

MAL-2026-14424

Malicious code in @medisend/webview-bridge (npm)

MAL-2026-14432

Malicious code in kelly-stake-sizing (npm)

MAL-2026-14434

Malicious code in openai-pr-reviewer (npm)

MAL-2026-14428

Malicious code in consumerweb-serverutils (npm)

MAL-2026-14426

Malicious code in babel-polyfill-plugin-corejs2 (npm)

MAL-2026-14436

Malicious code in poly-price-node (npm)

MAL-2026-14425

Malicious code in auth-otp (npm)

MAL-2026-14438

Malicious code in remove-bg-serverless-azure (npm)

MAL-2026-14429

Malicious code in dim-hydration-ui (npm)

MAL-2026-14431

Malicious code in hydration-ui-dim (npm)

MAL-2026-14430

Malicious code in hydration-dim-ui (npm)

MAL-2026-14439

Malicious code in secret-key-totp (npm)

MAL-2026-14435

Malicious code in paypal-business-sdk (npm)

MAL-2026-14433

Malicious code in manticore-log (npm)

MAL-2026-14437

Malicious code in ppb-manticore (npm)

MAL-2026-14420

Malicious code in @gsas/gsas-sdk (npm)

MAL-2026-14440

Malicious code in web-advertising (npm)

MAL-2026-15686

Malicious code in @yuva2210/htx-poc-skills-rce (npm)