Supply Chain Incidents

MAL-2026-5051

Malicious code in @tc-core/provider-service (npm)

MAL-2026-5070

Malicious code in foundry-config (npm)

MAL-2026-5062

Malicious code in codex-devcontainer-install (npm)

MAL-2026-5048

Malicious code in @cplace-project-planning-fe/cf-project-planning (npm)

MAL-2026-5066

Malicious code in ethers-hash (npm)

MAL-2026-5049

Malicious code in @lir-portal/web-components (npm)

MAL-2026-5053

Malicious code in @timelycare/common (npm)

MAL-2026-5030

Malicious code in tiny-naturalsort (npm)

MAL-2026-5028

Malicious code in sorenson-webfonts (npm)

MAL-2026-5034

Malicious code in @t-in-one/add_application (npm)

MAL-2026-5041

Malicious code in @t-in-one/prefill_bundle_data_token (npm)

MAL-2026-5036

Malicious code in @t-in-one/add_application_tid (npm)

MAL-2026-5044

Malicious code in @t-in-one/restore_application_hid_from_storage (npm)

MAL-2026-5043

Malicious code in @t-in-one/prefill_transformers_data_token (npm)

MAL-2026-5039

Malicious code in @t-in-one/get_application_hid (npm)

MAL-2026-5037

Malicious code in @t-in-one/application_id_storage_key_token (npm)

MAL-2026-5038

Malicious code in @t-in-one/form_product_token (npm)

MAL-2026-5035

Malicious code in @t-in-one/add_application_service_token (npm)

MAL-2026-5042

Malicious code in @t-in-one/prefill_credit_data_token (npm)

MAL-2026-5040

Malicious code in @t-in-one/only_difference_payload (npm)

MAL-2026-5031

Malicious code in @capibar.chat/ui-kit (npm)

MAL-2026-5045

Malicious code in @t-in-one/safe_local_storage_token (npm)

MAL-2026-5046

Malicious code in @t-in-one/send_add_application (npm)

MAL-2026-5033

Malicious code in @t-in-one/add_app_middleware_token (npm)