Supply Chain Incidents

MAL-2026-6064

Malicious code in tailwindcss-animates-css (npm)

MAL-2026-6060

Malicious code in qrcode-express (npm)

MAL-2026-6061

Malicious code in qrcode-generator-node (npm)

MAL-2026-6059

Malicious code in express-validates (npm)

MAL-2026-6148

Malicious code in async-protobuf-av (npm)

MAL-2026-6163

Malicious code in framerate-interaction-permissions (npm)

MAL-2026-6150

Malicious code in barcodescanner-reconnect (npm)

MAL-2026-6149

Malicious code in backgroundprocessing-contextmenus (npm)

MAL-2026-6179

Malicious code in touchid-images (npm)

MAL-2026-6165

Malicious code in ios-save-area-custom (npm)

MAL-2026-6169

Malicious code in notificationcenter-enzyme-jest (npm)

MAL-2026-6181

Malicious code in virtualization-compression-collapse (npm)

MAL-2026-6177

Malicious code in socket-network (npm)

MAL-2026-6174

Malicious code in pushnotifications-gesturerecognition (npm)

MAL-2026-6167

Malicious code in lazyloading-haptics (npm)

MAL-2026-6172

Malicious code in platformspecific-webgl (npm)

MAL-2026-6164

Malicious code in interaction-photos-infinitescroll (npm)

MAL-2026-6159

Malicious code in expandingcards-socket-virtualization (npm)

MAL-2026-6158

Malicious code in enzyme-optimization-bluetooth (npm)

MAL-2026-6170

Malicious code in onesignal-hooks (npm)

MAL-2026-6160

Malicious code in firebase-readability (npm)

MAL-2026-6146

Malicious code in actionbars-infinitescroll-searchbar (npm)

MAL-2026-6147

Malicious code in analytics-readability-gestures (npm)

MAL-2026-6153

Malicious code in datapersistence-profiling (npm)