Supply Chain Incidents

MAL-2026-2033

Malicious code in @emilgroup/accounting-sdk (npm)

MAL-2026-2031

Malicious code in @emilgroup/account-sdk (npm)

MAL-2026-2067

Malicious code in babel-plugin-react-pure-component (npm)

MAL-2026-2030

Malicious code in @pypestream/floating-ui-dom (npm)

MAL-2026-2027

Malicious code in opengov-k6-core (npm)

MAL-2026-2025

Malicious code in remitly-blog (npm)

MAL-2026-2024

Malicious code in @mesh-helpers/themehelper (npm)

MAL-2026-2022

Malicious code in @mesh-components/card (npm)

MAL-2026-2023

Malicious code in @mesh-components/customthemeprovider (npm)

MAL-2026-2021

Malicious code in @mesh-helpers/common (npm)

MAL-2026-2018

Malicious code in @modals/blockchain (npm)

MAL-2026-2019

Malicious code in @modals/layout (npm)

MAL-2026-2015

Malicious code in lingewindows (npm)

MAL-2026-2014

Malicious code in address-autocompletetest (npm)

MAL-2026-2012

Malicious code in characterai-poc (npm)

MAL-2026-2011

Malicious code in cms-catalogue (npm)

MAL-2026-2010

Malicious code in yelp-react-component-badge (npm)

MAL-2026-2009

Malicious code in repo-typescript-config (npm)

MAL-2026-2008

Malicious code in nintendoamerica-ncom (npm)

MAL-2026-2007

Malicious code in uniswap-info (npm)

MAL-2026-2003

Malicious code in shakti-strings (npm)

MAL-2026-2002

Malicious code in nflx-cmisc (npm)

MAL-2026-2001

Malicious code in laserlogsink (npm)

MAL-2026-1998

Malicious code in delphoi (npm)