Supply Chain Incidents

MAL-2026-3157

Malicious code in apple-internal-auth-v3 (npm)

MAL-2026-3150

Malicious code in apple-cktool-api-v2 (npm)

MAL-2026-3158

Malicious code in apple-internal-pki-trust (npm)

MAL-2026-3162

Malicious code in apple-pki-cert-validator (npm)

MAL-2026-3160

Malicious code in apple-internal-pki-utils (npm)

MAL-2026-3163

Malicious code in npm-global-util (npm)

MAL-2026-3153

Malicious code in apple-infra-final-escape (npm)

MAL-2026-3156

Malicious code in apple-infra-ultimate-bypass (npm)

MAL-2026-3147

Malicious code in coinmate-typescript-client (npm)

MAL-2026-3140

Malicious code in fivem-monitor (npm)

MAL-2026-3128

Malicious code in wm-plugin-teach-me-widget (npm)

MAL-2026-3123

Malicious code in apple-app-store-server-library-poc (npm)

MAL-2026-3122

Malicious code in @w3m-frame/session_update (npm)

MAL-2026-3120

Malicious code in @pyme-web/web-api (npm)

MAL-2026-3119

Malicious code in @pyme-web/ui-widget (npm)

MAL-2026-3118

Malicious code in @pyme-web/ui-base (npm)

MAL-2026-3121

Malicious code in @taxmoninor/taxmon (npm)

MAL-2026-3111

Malicious code in @apple-pay-trust/authorize-payment (npm)

MAL-2026-3108

Malicious code in @activation_code/success (npm)

MAL-2026-3112

Malicious code in @apple-pay-trust/cancelled (npm)

MAL-2026-3109

Malicious code in @apiary-annex/meta (npm)

MAL-2026-3117

Malicious code in @business_promocode/cancel_promocode (npm)

MAL-2026-3106

Malicious code in @activation_code/activate (npm)

MAL-2026-3116

Malicious code in @business_promocode/apply_promocode (npm)