Supply Chain Incidents

MAL-2026-2917

Malicious code in ac-sasskit-internal (npm)

MAL-2026-2926

Malicious code in material-ui-plugin-cache-endpoint (npm)

MAL-2026-2851

Malicious code in @indriver-poc/whisperwind (npm)

MAL-2026-2850

Malicious code in value-slider (npm)

MAL-2026-2848

Malicious code in @than-xs/libsignal-node (npm)

MAL-2026-2849

Malicious code in @than1st/baileys (npm)

MAL-2026-2846

Malicious code in eslint-plugin-totara (npm)

MAL-2026-2845

Malicious code in node-red-contrib-yolo-object-detection (npm)

MAL-2026-2838

Malicious code in koa-v3 (npm)

MAL-2026-2828

Malicious code in express-security-policy (npm)

MAL-2026-2830

Malicious code in renovate-config-doctolib (npm)

MAL-2026-2829

Malicious code in paddle-internal-scripts (npm)

MAL-2026-2822

Malicious code in ing-web-v5 (npm)

MAL-2026-2890

Malicious code in chai-as-ide (npm)

MAL-2026-2891

Malicious code in chai-as-init (npm)

MAL-2026-2895

Malicious code in chai-as-optimized (npm)

MAL-2026-2817

Malicious code in lightweight-charts-4.1 (npm)

MAL-2026-2914

Malicious code in modern-events (npm)

MAL-2026-2701

Malicious code in sanitize-url (npm)

MAL-2026-2700

Malicious code in conventional-changelog-dash (npm)

MAL-2026-2806

Malicious code in youpin (npm)

MAL-2026-2805

Malicious code in winston-prisma (npm)

MAL-2026-2804

Malicious code in transcript-viewer-ui-demo (npm)

MAL-2026-2803

Malicious code in tailwind-configuration (npm)