Supply Chain Incidents

MAL-2026-7034

Malicious code in @alphasedboy/game (npm)

MAL-2026-7033

Malicious code in @2011-08-19/n (npm)

MAL-2026-10655

Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)

MAL-2026-10656

Malicious code in @pimy-b2cweb/frontend-lib (npm)

MAL-2026-6911

Malicious code in @higherlogic/ocfe (npm)

MAL-2026-6907

Malicious code in chai-spycore (npm)

MAL-2026-6909

Malicious code in express-firegate (npm)

MAL-2026-6908

Malicious code in express-deflect (npm)

MAL-2026-6910

Malicious code in zluri-ad-connector (npm)

MAL-2026-6906

Malicious code in xnder-sdk-js (npm)

MAL-2026-6905

Malicious code in winston-prism (npm)

MAL-2026-6904

Malicious code in winston-js-express (npm)

MAL-2026-6902

Malicious code in wime-zle (npm)

MAL-2026-6901

Malicious code in vite-plugin-svg-paths (npm)

MAL-2026-6888

Malicious code in tailwindcss-animatecss-latest (npm)

MAL-2026-6903

Malicious code in windrule-utils (npm)

MAL-2026-6890

Malicious code in tailwindcss-fonttypo-inter (npm)

MAL-2026-6899

Malicious code in twcompose-utils (npm)

MAL-2026-6871

Malicious code in renderctx (npm)

MAL-2026-6900

Malicious code in txs-data (npm)

MAL-2026-6896

Malicious code in ts-eslinter (npm)

MAL-2026-6897

Malicious code in ts-lint-builders (npm)

MAL-2026-6872

Malicious code in rma-utils (npm)

MAL-2026-6898

Malicious code in ts-relayer-pub (npm)