Supply Chain Incidents

MAL-2026-15686

Malicious code in @yuva2210/htx-poc-skills-rce (npm)

MAL-2026-15685

Malicious code in @x-team/strapi (npm)

MAL-2026-14442

Malicious code in svelte-ui-dim (npm)

MAL-2026-14441

Malicious code in svelte-dim-ui (npm)

MAL-2026-15684

Malicious code in @pimy-b2cweb/common (npm)

MAL-2026-15683

Malicious code in @pimy-b2cweb/apiclient-common (npm)

MAL-2026-15682

Malicious code in @ice-trade-components/common (npm)

MAL-2026-15681

Malicious code in @grab-food/order-sdk-web (npm)

MAL-2026-15680

Malicious code in @cawraytestorg/packagetest2 (npm)

MAL-2026-15679

Malicious code in @bpa-internal/bpa-utils (npm)

MAL-2026-15678

Malicious code in @bpa-internal/bpa-types (npm)

MAL-2026-15677

Malicious code in @bpa-internal/bpa-common (npm)

MAL-2026-15676

Malicious code in @bpa-internal/bpa-auth (npm)

MAL-2026-15675

Malicious code in @b2b-frontend/store (npm)

MAL-2026-14418

Malicious code in dotish (npm)

MAL-2026-14416

Malicious code in dims-hydration-ui (npm)

MAL-2026-14417

Malicious code in dims-svelte-ui (npm)

MAL-2026-14419

Malicious code in tkyoussef-hb (npm)

MAL-2026-14443

Malicious code in @elc-online/up-analytics (npm)

MAL-2026-14413

Malicious code in livemcp (npm)

MAL-2026-14412

Malicious code in @deepaksilaych/sess (npm)

MAL-2026-14414

Malicious code in mcp-real-chrome (npm)

MAL-2026-14415

Malicious code in react-dynamic-parser (npm)

MAL-2026-14411

Malicious code in dpg-media-7ehemel (npm)