Supply Chain Incidents

MAL-2026-17655

Malicious code in css-flow-render-shim (npm)

MAL-2026-17656

Malicious code in css-reading-display-polyfill (npm)

MAL-2026-17664

Malicious code in wix-ssr-thunderbolt-grid-polyfill (npm)

MAL-2026-17652

Malicious code in @ziedzzz/demo-canary (npm)

MAL-2026-17653

Malicious code in abbishal-poc-as-dependency (npm)

MAL-2026-17651

Malicious code in @praveenvjpm/color-utils-7210 (npm)

MAL-2026-17650

Malicious code in tensorlake (npm)

MAL-2026-17649

Malicious code in internallib_v788 (npm)

MAL-2026-17647

Malicious code in function-color (npm)

MAL-2026-17648

Malicious code in function-flag (npm)

MAL-2026-17666

Malicious code in animatecss-tailwind-bridge (npm)

MAL-2026-17667

Malicious code in tailwind-animatecss-uniform (npm)

MAL-2026-17665

Malicious code in animatecss-tailwind-adapter (npm)

MAL-2026-17646

Malicious code in tailwindcss-animatecss-keyframes (npm)

MAL-2026-17644

Malicious code in random-certs (npm)

MAL-2026-17645

Malicious code in vectorizers (npm)

MAL-2026-17643

Malicious code in waie-crash-baileys (npm)

MAL-2026-17642

Malicious code in personio-pipeline-projen (npm)

MAL-2026-17641

Malicious code in troubleshooting (npm)

MAL-2026-17640

Malicious code in browser-metrics-plugin.contrib (npm)

MAL-2026-17638

Malicious code in css-jptvix-polyfill (npm)

MAL-2026-17637

Malicious code in captchetat-angularv8 (npm)

MAL-2026-17636

Malicious code in hardhat-init (npm)

MAL-2026-17632

Malicious code in internallib_v23 (npm)