Supply Chain Incidents

MAL-2026-11060

Malicious code in f0-form-manipulator (npm)

MAL-2026-11062

Malicious code in preferenceslifecycle-paypal (npm)

MAL-2026-11057

Malicious code in merchantprefsservice-paypal (npm)

MAL-2026-11056

Malicious code in gpaas-paypal (npm)

MAL-2026-11059

Malicious code in pp-react-ui5 (npm)

MAL-2026-11058

Malicious code in payoutsvettingserv-paypal (npm)

MAL-2026-11055

Malicious code in fundraiserservicepp (npm)

MAL-2026-11069

Malicious code in clerk-next-fix-auth-protection (npm)

MAL-2026-11052

Malicious code in app-data-layer (npm)

MAL-2026-11054

Malicious code in app-node-layer (npm)

MAL-2026-11053

Malicious code in app-data-lts (npm)

MAL-2026-11045

Malicious code in subapp-pkg-util (npm)

MAL-2026-11041

Malicious code in @daylightqc/date-fmt-lite (npm)

MAL-2026-11034

Malicious code in eth-slint (npm)

MAL-2026-11032

Malicious code in chai-as-stringify (npm)

MAL-2026-11039

Malicious code in yuinpm (npm)

MAL-2026-11033

Malicious code in eth-codergen (npm)

MAL-2026-11038

Malicious code in svelte-streak-metrics (npm)

MAL-2026-11036

Malicious code in streak-lib-math (npm)

MAL-2026-11035

Malicious code in streak-bucket-lib (npm)

MAL-2026-11037

Malicious code in svelte-goal-streak (npm)

MAL-2026-11030

Malicious code in vitest-axios (npm)

MAL-2026-11027

Malicious code in fs-extra-core (npm)

MAL-2026-11029

Malicious code in lychee-norm-cache (npm)