Supply Chain Incidents

MAL-2026-12438

Malicious code in sme-crm-services-sme-crm-services-core (npm)

MAL-2026-12442

Malicious code in sso-tramvai-lib-roles (npm)

MAL-2026-12351

Malicious code in checkout-common-tokens (npm)

MAL-2026-12474

Malicious code in taiga-ui-proprietary-navigation (npm)

MAL-2026-12450

Malicious code in statist-browser-typed-client-risktech.uwfrontantifraud.events (npm)

MAL-2026-12390

Malicious code in hubert-document-actual-insurance-rules-am (npm)

MAL-2026-12433

Malicious code in saas-f-lego-landings (npm)

MAL-2026-12472

Malicious code in sui-migration-audit-rules (npm)

MAL-2026-12441

Malicious code in sme-scripts-shared-library-webpack-plugin (npm)

MAL-2026-12486

Malicious code in travel-core-typings-reducers (npm)

MAL-2026-12412

Malicious code in pfp-forms-independent-sme-glossary-anchor (npm)

MAL-2026-12396

Malicious code in log-min (npm)

MAL-2026-12448

Malicious code in statist-browser-typed-client-mb.product.operations (npm)

MAL-2026-12382

Malicious code in finance-business-company-id-models (npm)

MAL-2026-12324

Malicious code in @nasdtickets/common (npm)

MAL-2026-12456

Malicious code in statist-statist-core (npm)

MAL-2026-12318

Malicious code in @hoteldev/common (npm)

MAL-2026-12437

Malicious code in simplipayng (npm)

MAL-2026-12340

Malicious code in block_package (npm)

MAL-2026-12485

Malicious code in trapp-configuration (npm)

MAL-2026-12401

Malicious code in mcp-audit-sync-internal (npm)

MAL-2026-12370

Malicious code in eslint-plugin-vitest-ts (npm)

MAL-2026-12458

Malicious code in streak-calendar-core (npm)

MAL-2026-12341

Malicious code in bnpl-blocks-independent-bnpl-search (npm)