Supply Chain Incidents

GHSA-jpvj-wpmj-h7rv

Supply chain compromise via malicious @cap-js/openapi

MAL-2026-5187

Malicious code in supabase (npm)

MAL-2026-5186

Malicious code in autotel-terminal (npm)

MAL-2026-5185

Malicious code in @jagreehal/workflow (npm)

MAL-2026-5364

Malicious code in cms-store-ren (npm)

MAL-2026-5179

Malicious code in chai-midpatch (npm)

MAL-2026-5180

Malicious code in nodemon-webpatch (npm)

MAL-2026-5175

Malicious code in webpack-json (npm)

MAL-2026-5174

Malicious code in nodemon-pack (npm)

MAL-2026-5182

Malicious code in brave-search-mcp-server (npm)

MAL-2026-5172

Malicious code in fundraiserserv (npm)

MAL-2026-5168

Malicious code in vg-interaction-model (npm)

MAL-2026-5169

Malicious code in chai-parse (npm)

MAL-2026-5166

Malicious code in sourceflow-tracker (npm)

MAL-2026-5158

Malicious code in page-info-service (npm)

MAL-2026-5159

Malicious code in po-ops-local-dev (npm)

MAL-2026-5153

Malicious code in @att-ebiz/abs-components-bc (npm)

MAL-2026-5150

Malicious code in @aonunited/angular (npm)

MAL-2026-5132

Malicious code in rookie-security-test-pkg (npm)

MAL-2026-5131

Malicious code in @redhat-cloud-services/sources-client (npm)

MAL-2026-5130

Malicious code in @redhat-cloud-services/integrations-client (npm)

MAL-2026-5129

Malicious code in @redhat-cloud-services/hcc-feo-mcp (npm)

MAL-2026-5128

Malicious code in @redhat-cloud-services/frontend-components-testing (npm)

MAL-2026-5127

Malicious code in @redhat-cloud-services/frontend-components-remediations (npm)