Supply Chain Incidents

MAL-2026-11226

Malicious code in @santieich/homebridge-midea-lan (npm)

MAL-2026-11309

Malicious code in famshot (npm)

MAL-2026-11240

Malicious code in aruda (npm)

MAL-2026-11219

Malicious code in @patternfly-4/quickstarts (npm)

MAL-2026-11221

Malicious code in @patternfly-4/react-table (npm)

MAL-2026-11220

Malicious code in @patternfly-4/react-core (npm)

MAL-2026-11222

Malicious code in @patternfly-4/react-tokens (npm)

MAL-2026-11339

Malicious code in node-fetch-core (npm)

MAL-2026-11218

Malicious code in @nordea-web/ui (npm)

MAL-2026-11217

Malicious code in @nordea-web/core (npm)

MAL-2026-11316

Malicious code in hjw-nasa-lib (npm)

MAL-2026-11338

Malicious code in ncc-web (npm)

MAL-2026-11336

Malicious code in ncc-fonts (npm)

MAL-2026-11337

Malicious code in ncc-hyperapp (npm)

MAL-2026-11284

Malicious code in dwa-tridion-webapp (npm)

MAL-2026-11403

Malicious code in tsetnpmackage (npm)

MAL-2026-11215

Malicious code in @meteora-sdk/core (npm)

MAL-2026-11397

Malicious code in testsetset (npm)

MAL-2026-11264

Malicious code in cmd-auth (npm)

MAL-2026-11325

Malicious code in kajl (npm)

MAL-2026-11369

Malicious code in react.jd (npm)

MAL-2026-11322

Malicious code in installreact (npm)

MAL-2026-11368

Malicious code in react.ja (npm)

MAL-2026-11370

Malicious code in reakt.js (npm)