Supply Chain Incidents

MAL-2026-3025

Malicious code in next-rwa (npm)

MAL-2026-3024

Malicious code in auth0-ui-components-docs (npm)

MAL-2026-3027

Malicious code in wrapped-logger-utils (npm)

MAL-2026-3026

Malicious code in sagat-core (npm)

MAL-2026-3021

Malicious code in lightspark-js (npm)

MAL-2026-3020

Malicious code in @bitwarden/cli (npm)

MAL-2026-3018

Malicious code in microsoft-employee-experience (npm)

MAL-2026-3019

Malicious code in hls.js (npm)

MAL-2026-3017

Malicious code in react-spa-npm (npm)

MAL-2026-3016

Malicious code in amazon-q-developer-streaming-client (npm)

MAL-2026-3029

Malicious code in eth-logger (npm)

MAL-2026-3008

Malicious code in json-spacer (npm)

MAL-2026-3007

Malicious code in json-dec (npm)

MAL-2026-3005

Malicious code in changelog-cli-logger (npm)

MAL-2026-3004

Malicious code in @nklkas/hyperliquid (npm)

MAL-2026-3006

Malicious code in changelog-utils-structured-logger (npm)

MAL-2026-3010

Malicious code in separadordeinfocc (npm)

MAL-2026-3013

Malicious code in undicy-http (npm)

MAL-2026-3014

Malicious code in vime-azl (npm)

MAL-2026-3011

Malicious code in ts-bing (npm)

MAL-2026-3009

Malicious code in rollup-plugin-polyfill-route (npm)

MAL-2026-3003

Malicious code in @amsterdam-local/forms-component-library (npm)

MAL-2026-3012

Malicious code in ts-moduler (npm)

MAL-2026-2998

Malicious code in @spinstorm/shared (npm)