Supply Chain Incidents

MAL-2026-4452

Malicious code in @tailwind-core/webpack (npm)

MAL-2026-4446

Malicious code in @solarcraft/observix (npm)

MAL-2026-4571

Malicious code in get-deps-path (npm)

MAL-2026-4559

Malicious code in fca-eryxenx (npm)

MAL-2026-4543

Malicious code in customerdigital-ui-containers-lib (npm)

MAL-2026-4532

Malicious code in code-tool-langfuse (npm)

MAL-2026-4579

Malicious code in hpsetup (npm)

MAL-2026-4591

Malicious code in jsonbson (npm)

MAL-2026-4407

Malicious code in @mcpassure/mcp-cnes (npm)

MAL-2026-4406

Malicious code in @mcpassure/mcp-anvisa-bulario (npm)

MAL-2026-4427

Malicious code in @rocketreach/rr-components (npm)

MAL-2026-4450

Malicious code in @tailwind-core/postcss (npm)

MAL-2026-4542

Malicious code in crypto-javascript (npm)

MAL-2026-4451

Malicious code in @tailwind-core/vite (npm)

MAL-2026-4602

Malicious code in lokal-mcp (npm)

MAL-2026-4694

Malicious code in tubebrain (npm)

MAL-2026-4693

Malicious code in to-cms (npm)

MAL-2026-4390

Malicious code in @flowselections/core (npm)

MAL-2026-4426

Malicious code in @riteshkumar04/stack-audit (npm)

MAL-2026-4606

Malicious code in martinez-polygon-clipping-tony (npm)

MAL-2026-4177

Malicious code in did-0091 (npm)

MAL-2026-4740

Malicious code in zod-to-js (npm)

MAL-2026-4701

Malicious code in venturo-playwright-runner (npm)

MAL-2026-4175

Malicious code in collected-forms-embed-js (npm)