Supply Chain Incidents

MAL-2026-17490

Malicious code in express-fork (npm)

MAL-2026-17489

Malicious code in express-enhanced (npm)

MAL-2026-17630

Malicious code in virgil-cli (npm)

MAL-2026-17459

Malicious code in ui-base-colors (npm)

MAL-2026-17460

Malicious code in ui.dist.min.js (npm)

MAL-2026-17458

Malicious code in translate-base-font (npm)

MAL-2026-17456

Malicious code in @smwebserver/static (npm)

MAL-2026-17426

Malicious code in kartykgithub-ph-f (npm)

MAL-2026-17425

Malicious code in kartykgithub-ph-e (npm)

MAL-2026-17424

Malicious code in kartykgithub-ph-b (npm)

MAL-2026-17423

Malicious code in illusion-datalab (npm)

MAL-2026-17420

Malicious code in online-header (npm)

MAL-2026-17437

Malicious code in @bluewin/utils (npm)

MAL-2026-17415

Malicious code in com.epi.e2e_test (npm)

MAL-2026-17339

Malicious code in reactjs-risk (npm)

MAL-2026-17433

Malicious code in figma-to-apl (npm)

MAL-2026-17435

Malicious code in niksinnkatalapp (npm)

MAL-2026-17431

Malicious code in apl-rive-renderer (npm)

MAL-2026-17434

Malicious code in live-detection-dashboard (npm)

MAL-2026-17432

Malicious code in brioche-apl-dev-env (npm)

MAL-2026-17429

Malicious code in ai-workshop-radio-lambda (npm)

MAL-2026-17427

Malicious code in ai-workshop-maa15-radio (npm)

MAL-2026-17430

Malicious code in alexa-cybertron-team-code-review-agent (npm)

MAL-2026-17428

Malicious code in ai-workshop-radio-app (npm)