Supply Chain Incidents

MAL-2026-10170

Malicious code in paysafe-kyc (npm)

paysafe-fraud

MAL-2026-10168

Malicious code in paysafe-fraud (npm)

paysafe-js

MAL-2026-10169

Malicious code in paysafe-js (npm)

paysafe-checkout

MAL-2026-10167

Malicious code in paysafe-checkout (npm)

paysafe-api

MAL-2026-10166

Malicious code in paysafe-api (npm)

type-atob

MAL-2026-10174

Malicious code in type-atob (npm)

llama-tokenizer

MAL-2026-10163

Malicious code in llama-tokenizer (npm)

type-async

MAL-2026-10164

Malicious code in type-async (npm)

@bcryptln/becryptjs

MAL-2026-10162

Malicious code in @bcryptln/becryptjs (npm)

rollup-packages-polyfill-core

MAL-2026-10160

Malicious code in rollup-packages-polyfill-core (npm)

buffer-util-internal

MAL-2026-10151

Malicious code in buffer-util-internal (npm)

ap3-components-ui

MAL-2026-10150

Malicious code in ap3-components-ui (npm)

notify-utilities

MAL-2026-10158

Malicious code in notify-utilities (npm)

notify-logs

MAL-2026-10156

Malicious code in notify-logs (npm)

notify-theme

MAL-2026-10157

Malicious code in notify-theme (npm)

notify-dist

MAL-2026-10154

Malicious code in notify-dist (npm)

notify-funcs

MAL-2026-10155

Malicious code in notify-funcs (npm)

notifier-log

MAL-2026-10153

Malicious code in notifier-log (npm)

notifier-funcs

MAL-2026-10152

Malicious code in notifier-funcs (npm)

npm-rce-safe-proof-yourname

MAL-2026-10159

Malicious code in npm-rce-safe-proof-yourname (npm)

sidecar-mcp

MAL-2026-10161

Malicious code in sidecar-mcp (npm)

Backdoor

@genie-auth/config

MAL-2026-10141

Malicious code in @genie-auth/config (npm)

@amtrav/webservice

MAL-2026-10140

Malicious code in @amtrav/webservice (npm)

motiondnb

MAL-2026-10145

Malicious code in motiondnb (npm)