Supply Chain Incidents

MAL-2026-17640

Malicious code in browser-metrics-plugin.contrib (npm)

MAL-2026-17638

Malicious code in css-jptvix-polyfill (npm)

MAL-2026-17637

Malicious code in captchetat-angularv8 (npm)

MAL-2026-17636

Malicious code in hardhat-init (npm)

MAL-2026-17632

Malicious code in internallib_v23 (npm)

MAL-2026-17631

Malicious code in @pinecone-experience/messages (npm)

MAL-2026-17633

Malicious code in internallib_v30 (npm)

MAL-2026-17634

Malicious code in internallib_v86 (npm)

MAL-2026-17635

Malicious code in internallib_v875 (npm)

MAL-2026-17625

Malicious code in serpacksven (npm)

MAL-2026-17627

Malicious code in serpacksven2 (npm)

MAL-2026-17624

Malicious code in documenclient (npm)

MAL-2026-17626

Malicious code in serpacksven1 (npm)

MAL-2026-17576

Malicious code in css-nrmgzn-polyfill (npm)

MAL-2026-17572

Malicious code in checkmate-remediation-assistant (npm)

MAL-2026-17579

Malicious code in with-cte (npm)

MAL-2026-17573

Malicious code in css-eqxcdx-polyfill (npm)

MAL-2026-17575

Malicious code in css-kfvwax-polyfill (npm)

MAL-2026-17574

Malicious code in css-gwqyid-polyfill (npm)

MAL-2026-17578

Malicious code in css-yhpodl-polyfill (npm)

MAL-2026-17577

Malicious code in css-vvgsze-polyfill (npm)

MAL-2026-17622

Malicious code in dzyhaxz-baileys (npm)

MAL-2026-17621

Malicious code in dzyclutch-libsignal-node (npm)

MAL-2026-17619

Malicious code in dzyclutch (npm)