Supply Chain Incidents

MAL-2026-12336

Malicious code in afisha-storybook-default (npm)

MAL-2026-12417

Malicious code in post-css-transfer (npm)

MAL-2026-12387

Malicious code in gekko-mev-bot (npm)

MAL-2026-12385

Malicious code in fry-page-maker-types (npm)

MAL-2026-12374

Malicious code in eventea-router (npm)

MAL-2026-12446

Malicious code in statist-browser-typed-client-itsa.digitalinterview.events (npm)

MAL-2026-12384

Malicious code in form-bnpl-dolyame-component-object (npm)

MAL-2026-12327

Malicious code in @offa-uwk/offa-uwk (npm)

MAL-2026-12343

Malicious code in bpm-foundation-feature-flags (npm)

MAL-2026-12478

Malicious code in test22221 (npm)

MAL-2026-12361

Malicious code in deposits-overnight (npm)

MAL-2026-12381

Malicious code in fb-hr-sites--boxified-form-meetup-subcribe (npm)

MAL-2026-12468

Malicious code in streak-math-kit (npm)

MAL-2026-12346

Malicious code in cardsmobile-collection (npm)

MAL-2026-12483

Malicious code in tracker-radar-detector (npm)

MAL-2026-12354

Malicious code in code-analyzer-mcp (npm)

MAL-2026-12480

Malicious code in tms-x-headers (npm)

MAL-2026-12477

Malicious code in tcb-web-images (npm)

MAL-2026-12449

Malicious code in statist-browser-typed-client-mb.reliability.android.metrics (npm)

MAL-2026-12352

Malicious code in checkout-mobile-pay-button (npm)

MAL-2026-12330

Malicious code in @vboxdev/common (npm)

MAL-2026-12415

Malicious code in pfp-forms-sme-sitebuilder (npm)

MAL-2026-12408

Malicious code in pfp-block-independent-iframe (npm)

MAL-2026-12451

Malicious code in statist-browser-typed-client-rubliq.platform.keycloak (npm)