Supply Chain Incidents

MAL-2026-4680

Malicious code in tailwind-style-typography (npm)

MAL-2026-4556

Malicious code in express-enrouten-async (npm)

MAL-2026-4612

Malicious code in mmt-static (npm)

MAL-2026-4629

Malicious code in openmct-couch-plugin (npm)

MAL-2026-4555

Malicious code in events-router (npm)

MAL-2026-4646

Malicious code in prisma-client-python (npm)

MAL-2026-4658

Malicious code in rapyd-client (npm)

MAL-2026-4692

Malicious code in thevoid (npm)

MAL-2026-4508

Malicious code in cdk-insights (npm)

MAL-2026-4610

Malicious code in midcorp (npm)

MAL-2026-4627

Malicious code in onboardconnect-agent (npm)

MAL-2026-4634

Malicious code in osep-react-antd (npm)

MAL-2026-4633

Malicious code in osep-api-hub-service-client-v1 (npm)

MAL-2026-4677

Malicious code in swift-optimizer (npm)

MAL-2026-4257

Malicious code in @cloudways-lab/unified-design-system (npm)

MAL-2026-4256

Malicious code in @citi-icg-171632/citicms-repo-component (npm)

MAL-2026-4668

Malicious code in share-anything-cli (npm)

MAL-2026-4255

Malicious code in cdk-sagemaker-notebook-workflow (npm)

MAL-2026-4457

Malicious code in @tmecontinue/claude (npm)

MAL-2026-4533

Malicious code in codebuff-cli (npm)

MAL-2026-4563

Malicious code in finkrouter (npm)

MAL-2026-4455

Malicious code in @thebros/create-benjamin (npm)

MAL-2026-4254

Malicious code in reactive-cdk-app (npm)

MAL-2026-4395

Malicious code in @inetafrica/open-claudia (npm)