Supply Chain Incidents

MAL-2026-12323

Malicious code in @nasddatax/common (npm)

MAL-2026-12490

Malicious code in uniswap-sdk-v4 (npm)

MAL-2026-12367

Malicious code in dolyame-ui-form (npm)

MAL-2026-12360

Malicious code in csv-parser-helper (npm)

MAL-2026-12393

Malicious code in invest-module-cookie (npm)

MAL-2026-12432

Malicious code in runtime-sentinel (npm)

MAL-2026-12369

Malicious code in elephant-array-utils (npm)

MAL-2026-12362

Malicious code in digital-interview-digital-interview-core (npm)

MAL-2026-12479

Malicious code in time-linters-webapp-eslint-config (npm)

MAL-2026-12350

Malicious code in chart-data-utils (npm)

MAL-2026-12443

Malicious code in statist-browser-typed-client-automlplatform.nlppl.searchy (npm)

MAL-2026-12423

Malicious code in react-fontawesome-icons (npm)

MAL-2026-12342

Malicious code in boxy-fixture-allure (npm)

MAL-2026-12467

Malicious code in streak-int-lib (npm)

MAL-2026-12421

Malicious code in pvm-autodoc (npm)

MAL-2026-12455

Malicious code in statist-browser-typed-client-twork.tsales.nitro.metrics (npm)

MAL-2026-12470

Malicious code in streak-metricsa (npm)

MAL-2026-12383

Malicious code in foodi (npm)

MAL-2026-12475

Malicious code in tcb-web-copy-to-clipboard (npm)

MAL-2026-12462

Malicious code in streak-day-engine (npm)

MAL-2026-12454

Malicious code in statist-browser-typed-client-social.shorts.editor (npm)

MAL-2026-12413

Malicious code in pfp-forms-mobile-sme-group-tiles (npm)

MAL-2026-12314

Malicious code in @copilot-mcp/apex (npm)

MAL-2026-12333

Malicious code in @zahlen/checkout-react (npm)