Supply Chain Incidents

MAL-2026-3416

Malicious code in apple-mycelium-fix (npm)

MAL-2026-3647

Malicious code in haswons (npm)

MAL-2026-3421

Malicious code in oneblk-design-system (npm)

MAL-2026-3418

Malicious code in devsite-youtube (npm)

MAL-2026-3400

Malicious code in typo-crypto (npm)

MAL-2026-3399

Malicious code in money-badger-open-rpc-test-bugbount (npm)

MAL-2026-3397

Malicious code in tecken (npm)

MAL-2026-3395

Malicious code in coral-dev-proxy (npm)

MAL-2026-3394

Malicious code in @gaia-codesearch/gaia-api-typescript (npm)

MAL-2026-3387

Malicious code in @gaia-codesearch/gaia-api-python (npm)

MAL-2026-3417

Malicious code in connect-perspectives-admintool (npm)

MAL-2026-3419

Malicious code in msal-browser-1p (npm)

MAL-2026-3374

Malicious code in playgod (npm)

MAL-2026-3373

Malicious code in owa-analytics-utils (npm)

MAL-2026-3365

Malicious code in @b2bneo-rest/api-csf (npm)

MAL-2026-3363

Malicious code in mrdaa-frontend (npm)

MAL-2026-3362

Malicious code in 24712-pl5006 (npm)

MAL-2026-3640

Malicious code in camelotlabs-config (npm)

MAL-2026-3641

Malicious code in camelotlabs-core (npm)

MAL-2026-3644

Malicious code in camelotlabs-worker (npm)

MAL-2026-3643

Malicious code in camelotlabs-utils (npm)

MAL-2026-3642

Malicious code in camelotlabs-sdk (npm)

MAL-2026-3361

Malicious code in 24712-pl5004 (npm)

MAL-2026-3360

Malicious code in @paysafe-tracking/error-monitoring (npm)