Supply Chain Incidents

MAL-2026-2885

Malicious code in chai-as-adapter (npm)

MAL-2026-2893

Malicious code in chai-as-mobj (npm)

MAL-2026-2896

Malicious code in chai-as-stream (npm)

MAL-2026-2889

Malicious code in chai-as-evm (npm)

MAL-2026-2740

Malicious code in chai-as-type (npm)

MAL-2026-2884

Malicious code in forge-jsx (npm)

MAL-2026-2696

Malicious code in bfx-hf-strategy-perf (npm)

MAL-2026-2693

Malicious code in vs-supplier-portal-web (npm)

MAL-2026-2691

Malicious code in base-counter-web (npm)

MAL-2026-2692

Malicious code in fusion-events (npm)

MAL-2026-2690

Malicious code in @pnc-ref/harmony-support-v18 (npm)

MAL-2026-2689

Malicious code in @pnc-ref/harmony-core-v18 (npm)

MAL-2026-2688

Malicious code in @pnc-cib/cib-core-lib (npm)

MAL-2026-2687

Malicious code in com.baogong.app_push_permission (npm)

MAL-2026-2685

Malicious code in react-dom-19 (npm)

MAL-2026-2684

Malicious code in tensorzero-node (npm)

MAL-2026-2683

Malicious code in @athena-ui-components/axios (npm)

MAL-2026-2681

Malicious code in @athena-ui-components/dashboard-widget (npm)

MAL-2026-2682

Malicious code in @athena-ui-components/deeplink (npm)

MAL-2026-2916

Malicious code in @jesusvizcaino2021/com.baogong.app-push-permission (npm)

MAL-2026-2827

Malicious code in js-logger-pack (npm)

MAL-2026-2680

Malicious code in @veygo/component-library (npm)

MAL-2026-2674

Malicious code in chief-proxy-out (npm)

MAL-2026-2678

Malicious code in snitz-chief-cloud (npm)