Supply Chain Incidents

MAL-2026-2974

Malicious code in claudcode-mcp (npm)

MAL-2026-2972

Malicious code in aven_types (npm)

MAL-2026-2970

Malicious code in @usealloy/component-library (npm)

MAL-2026-2968

Malicious code in @bitunix/test (npm)

MAL-2026-2969

Malicious code in @usealloy/api-contract (npm)

MAL-2026-2971

Malicious code in @usealloy/typegen (npm)

MAL-2026-2967

Malicious code in 6161test1234 (npm)

MAL-2026-2966

Malicious code in com.tencent.puerts.agent (npm)

MAL-2026-2960

Malicious code in apple-auth-internal (npm)

MAL-2026-2961

Malicious code in apple-internal-security-poc-frank (npm)

MAL-2026-2956

Malicious code in @serasa/core (npm)

MAL-2026-2952

Malicious code in @settle-sea/supporting-documents (npm)

MAL-2026-2954

Malicious code in bmg-web-features (npm)

MAL-2026-2953

Malicious code in bmg-web (npm)

MAL-2026-2955

Malicious code in megabank-worklist (npm)

MAL-2026-2959

Malicious code in internal_insights_enabled (npm)

MAL-2026-2951

Malicious code in hifromhere1 (npm)

MAL-2026-2950

Malicious code in tailwind-text-fill (npm)

MAL-2026-2938

Malicious code in bignum-ts-v2 (npm)

MAL-2026-2941

Malicious code in npm-doc-deploy (npm)

MAL-2026-2937

Malicious code in @tushar-br/file11 (npm)

MAL-2026-2935

Malicious code in @tushar-br/desktop (npm)

MAL-2026-2936

Malicious code in @tushar-br/editing-pack (npm)

MAL-2026-2939

Malicious code in krdfonts (npm)