Supply Chain Incidents

MAL-2026-2134

Malicious code in yelp-biz-action-constants-js-generated (npm)

MAL-2026-2135

Malicious code in yelp-react-component-photo-upload (npm)

MAL-2026-2131

Malicious code in nemo-fpti (npm)

MAL-2026-2133

Malicious code in server-fpti (npm)

MAL-2026-2125

Malicious code in customerdigital-ui-components-lib (npm)

MAL-2026-2412

Malicious code in @wame/ngx-frf-utilities (npm)

MAL-2026-2411

Malicious code in @wame/ngx-adfs (npm)

MAL-2026-2418

Malicious code in tombac-chronos (npm)

MAL-2026-2410

Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)

MAL-2026-2409

Malicious code in @phonos/types (npm)

MAL-2026-2417

Malicious code in oc-navbar-module-client (npm)

MAL-2026-2416

Malicious code in oc-ccp-module-client (npm)

MAL-2026-2415

Malicious code in oc-aa-module-client (npm)

MAL-2026-2414

Malicious code in ftapi-core (npm)

MAL-2026-2223

Malicious code in cr-static-shared-components (npm)

MAL-2026-2408

Malicious code in @cloudsop/hmoment (npm)

MAL-2026-2407

Malicious code in @ceeferenderer/itg-renderer-sdk (npm)

MAL-2026-2406

Malicious code in @ceeferenderer/fe-renderer-sdk (npm)

MAL-2026-2413

Malicious code in cclr-component-resources (npm)

MAL-2026-2123

Malicious code in yelp-mobile-site-common (npm)

MAL-2026-2111

Malicious code in tailwind-font-inter (npm)

MAL-2026-2110

Malicious code in react-tailwindcss-style (npm)

MAL-2026-2101

Malicious code in sidebar-basket (npm)

MAL-2026-2094

Malicious code in pulse-scroll-triggered-list-items (npm)