Supply Chain Incidents

MAL-2026-16360

Malicious code in @uh-platform/nadaver (npm)

MAL-2026-16359

Malicious code in @uh-platform/domain-widget (npm)

MAL-2026-16362

Malicious code in @uh-platform/webcard (npm)

MAL-2026-16358

Malicious code in @uh-platform/cloud (npm)

MAL-2026-16361

Malicious code in @uh-platform/nadaver2 (npm)

MAL-2026-16355

Malicious code in gemini-computer-use (npm)

MAL-2026-16354

Malicious code in @woodpecker-web-shared/components (npm)

MAL-2026-16352

Malicious code in @baanx/blockchain-config (npm)

MAL-2026-16351

Malicious code in @baanx/abis (npm)

MAL-2026-16353

Malicious code in @insiderintelligence/componentlibrary (npm)

MAL-2026-16350

Malicious code in bnppf-flag-icons (npm)

MAL-2026-16348

Malicious code in hardhat-base (npm)

MAL-2026-16349

Malicious code in hardhat-devkit (npm)

MAL-2026-16338

Malicious code in pf23727 (npm)

MAL-2026-16341

Malicious code in pflag14570 (npm)

MAL-2026-16342

Malicious code in pflag29424 (npm)

MAL-2026-16339

Malicious code in pf25133 (npm)

MAL-2026-16334

Malicious code in keroeltopgg (npm)

MAL-2026-16336

Malicious code in keroeltopkkk (npm)

MAL-2026-16335

Malicious code in keroeltopkk (npm)

MAL-2026-16337

Malicious code in my-cdn-script (npm)

MAL-2026-16340

Malicious code in pf25262 (npm)

MAL-2026-16333

Malicious code in homestack-cheer (npm)

MAL-2026-16318

Malicious code in @asenfotech/unplugin-element-plus (npm)