Supply Chain Incidents

MAL-2026-3464

Malicious code in @tanstack/nitro-v2-vite-plugin (npm)

MAL-2026-3463

Malicious code in @tanstack/history (npm)

MAL-2026-3462

Malicious code in @tanstack/eslint-plugin-start (npm)

MAL-2026-3461

Malicious code in @tanstack/eslint-plugin-router (npm)

MAL-2026-3460

Malicious code in @tanstack/arktype-adapter (npm)

MAL-2026-3432

Malicious code in @mistralai/mistralai (npm)

MAL-2026-3430

Malicious code in cplace-bmw-emt-mvp (npm)

MAL-2026-3508

Malicious code in crypto-javascri (npm)

MAL-2026-3506

Malicious code in @mimecast-ui/charts (npm)

MAL-2026-3507

Malicious code in @mimecast-ui/components (npm)

MAL-2026-3427

Malicious code in @cplace-workflow-fe/cf-workflow (npm)

MAL-2026-3509

Malicious code in pp-react-v5 (npm)

MAL-2026-3423

Malicious code in byvendors (npm)

MAL-2026-3639

Malicious code in briantreehttp (npm)

MAL-2026-3415

Malicious code in ac-sasskit (npm)

MAL-2026-3422

Malicious code in rsflows-pexml (npm)

MAL-2026-3420

Malicious code in noon-contracts (npm)

MAL-2026-3412

Malicious code in post-purchase-bundler (npm)

MAL-2026-3410

Malicious code in @miurba/alcazaba (npm)

MAL-2026-3409

Malicious code in mw-filesystem-events-nodream (npm)

MAL-2026-3645

Malicious code in dit-envv (npm)

MAL-2026-3646

Malicious code in erslove (npm)

MAL-2026-3414

Malicious code in @rsi-community/hub-schema (npm)

MAL-2026-3404

Malicious code in @matjp/dvi-decode (npm)