Supply Chain Incidents

MAL-2026-3358

Malicious code in 24712-pl4712 (npm)

MAL-2026-3359

Malicious code in b2bneo-rest (npm)

MAL-2026-3357

Malicious code in 24712-plv2 (npm)

MAL-2026-3353

Malicious code in money-badger-open-rpc (npm)

MAL-2026-3352

Malicious code in carbonite-internal (npm)

MAL-2026-3609

Malicious code in forge-jsxy (npm)

MAL-2026-3348

Malicious code in @rivianlabs/bedrock (npm)

MAL-2026-3349

Malicious code in @rivianlabs/dc-fe-app-web-rivian-com (npm)

MAL-2026-3351

Malicious code in @rivianlabs/dt-shop-bag-v0 (npm)

MAL-2026-3350

Malicious code in @rivianlabs/dt-lib-lumberjack (npm)

MAL-2026-3346

Malicious code in generator-go-circleci (npm)

MAL-2026-3345

Malicious code in deployment-core (npm)

MAL-2026-3343

Malicious code in @atlan/connectors (npm)

MAL-2026-3344

Malicious code in @bold-commerce/stacks-ui (npm)

MAL-2026-3340

Malicious code in trevlo (npm)

MAL-2026-3339

Malicious code in nf-ui-components (npm)

MAL-2026-3334

Malicious code in fanduel (npm)

MAL-2026-3331

Malicious code in lazyhtml-scripts (npm)

MAL-2026-3338

Malicious code in ms.analytics-web (npm)

MAL-2026-3329

Malicious code in api-typings (npm)

MAL-2026-3330

Malicious code in seek-pass (npm)

MAL-2026-3328

Malicious code in pocpoc2626 (npm)

MAL-2026-3327

Malicious code in capacitor-plugin-service-worker (npm)

MAL-2026-3336

Malicious code in @channel_bot/xa0 (npm)