Supply Chain Incidents

MAL-2026-11441

Malicious code in @moxfive-llc/common (npm)

MAL-2026-11451

Malicious code in @spending-behavior-ui/widget-insights (npm)

MAL-2026-11450

Malicious code in @spending-behavior-ui/cashflow-widget (npm)

MAL-2026-11444

Malicious code in @mplay-frontend-ui/link (npm)

MAL-2026-11449

Malicious code in @sof-assistant-fe-lib/vertical-faqs (npm)

MAL-2026-11445

Malicious code in @nordic-dev/linting-tools (npm)

MAL-2026-11436

Malicious code in @finance-ui/finance-view (npm)

MAL-2026-11440

Malicious code in @meli-testing/jest-react (npm)

MAL-2026-11438

Malicious code in @fuji-web-components/maps (npm)

MAL-2026-11442

Malicious code in @mp-op-ss-front-lib/tracks (npm)

MAL-2026-11452

Malicious code in @sw-commons-components/message-upsell (npm)

MAL-2026-11439

Malicious code in @global-theme/context (npm)

MAL-2026-11446

Malicious code in @one-chat/react (npm)

MAL-2026-11443

Malicious code in @mplay-core-lib/utilities (npm)

MAL-2026-11435

Malicious code in @cr-invested-ui-components/chart (npm)

MAL-2026-11473

Malicious code in metrics-ui (npm)

MAL-2026-11437

Malicious code in @finance-ui/snackbar-ifpe (npm)

MAL-2026-11477

Malicious code in refbase-mcp (npm)

MAL-2026-11455

Malicious code in allurectl (npm)

MAL-2026-11466

Malicious code in hit-mcp (npm)

MAL-2026-11472

Malicious code in mcp-server-boilerplate (npm)

MAL-2026-11469

Malicious code in iwomm-mcp (npm)

MAL-2026-11474

Malicious code in paraglide-js (npm)

MAL-2026-11459

Malicious code in community-published (npm)