Supply Chain Incidents

MAL-2026-4658

Malicious code in rapyd-client (npm)

MAL-2026-4692

Malicious code in thevoid (npm)

MAL-2026-4508

Malicious code in cdk-insights (npm)

MAL-2026-4610

Malicious code in midcorp (npm)

MAL-2026-4627

Malicious code in onboardconnect-agent (npm)

MAL-2026-4634

Malicious code in osep-react-antd (npm)

MAL-2026-4633

Malicious code in osep-api-hub-service-client-v1 (npm)

MAL-2026-4677

Malicious code in swift-optimizer (npm)

MAL-2026-4257

Malicious code in @cloudways-lab/unified-design-system (npm)

MAL-2026-4256

Malicious code in @citi-icg-171632/citicms-repo-component (npm)

MAL-2026-4668

Malicious code in share-anything-cli (npm)

MAL-2026-4255

Malicious code in cdk-sagemaker-notebook-workflow (npm)

MAL-2026-4457

Malicious code in @tmecontinue/claude (npm)

MAL-2026-4533

Malicious code in codebuff-cli (npm)

MAL-2026-4563

Malicious code in finkrouter (npm)

MAL-2026-4455

Malicious code in @thebros/create-benjamin (npm)

MAL-2026-4254

Malicious code in reactive-cdk-app (npm)

MAL-2026-4395

Malicious code in @inetafrica/open-claudia (npm)

MAL-2026-4417

Malicious code in @pisell/pisellos (npm)

MAL-2026-4597

Malicious code in kurumi-fca (npm)

MAL-2026-4387

Malicious code in @euqns/nudge-mcp (npm)

MAL-2026-4572

Malicious code in get-package-lint (npm)

MAL-2026-4671

Malicious code in skipshot-agent (npm)

MAL-2026-4252

Malicious code in @43uh3ig43/telemetry-client (npm)