Supply Chain Incidents

MAL-2026-3290

Malicious code in @allyfinancial/allyfinancial-api (npm)

MAL-2026-3301

Malicious code in ally-json-threat-protect (npm)

MAL-2026-3302

Malicious code in ally-starter-api (npm)

MAL-2026-3300

Malicious code in ally-forms (npm)

MAL-2026-3296

Malicious code in ally-badges (npm)

MAL-2026-3298

Malicious code in ally-ccapi (npm)

MAL-2026-3241

Malicious code in nextjs-chat-with-ai-service (npm)

MAL-2026-3234

Malicious code in apexpro (npm)

MAL-2026-3233

Malicious code in apexomni (npm)

MAL-2026-3288

Malicious code in common-tg-service (npm)

MAL-2026-3287

Malicious code in ams-ssk (npm)

MAL-2026-3232

Malicious code in codewhisperer-streaming (npm)

MAL-2026-3306

Malicious code in bpmn-studio (npm)

MAL-2026-3215

Malicious code in archetype-style (npm)

MAL-2026-3315

Malicious code in update-db (npm)

MAL-2026-3314

Malicious code in update-browserslist (npm)

MAL-2026-3307

Malicious code in browserslist-db (npm)

MAL-2026-3308

Malicious code in common-roles (npm)

MAL-2026-3209

Malicious code in apple-internal-security-library-v99 (npm)

MAL-2026-3312

Malicious code in path-internal-util (npm)

MAL-2026-3311

Malicious code in path-addon (npm)

MAL-2026-3310

Malicious code in gweb-build-system (npm)

MAL-2026-3313

Malicious code in service-gateway (npm)

MAL-2026-3204

Malicious code in intercom-client (npm)