Supply Chain Incidents

MAL-2026-1952

Malicious code in json-parse-genie (npm)

MAL-2026-1951

Malicious code in interface-builder-kit (npm)

MAL-2026-1935

Malicious code in jsonify-bundler (npm)

MAL-2026-1936

Malicious code in lint-builder (npm)

MAL-2026-1934

Malicious code in big-nunber (npm)

MAL-2026-1931

Malicious code in react-native-country-select (npm)

MAL-2026-1932

Malicious code in react-native-international-phone-number (npm)

MAL-2026-1930

Malicious code in @iflow-mcp/watercrawl-watercrawl-mcp (npm)

MAL-2026-1929

Malicious code in @aifabrix/miso-client (npm)

MAL-2026-1927

Malicious code in changelog-logger-utils (npm)

MAL-2026-1928

Malicious code in changelog-logger-wrap (npm)

MAL-2026-1926

Malicious code in tokenshower (npm)

MAL-2026-1925

Malicious code in jsonify-parser (npm)

MAL-2026-1580

Malicious code in nflx-release (npm)

MAL-2026-1584

Malicious code in wn-idv-persona-client (npm)

MAL-2026-1583

Malicious code in whatnot-web (npm)

MAL-2026-1581

Malicious code in whatnot-events (npm)

MAL-2026-1582

Malicious code in whatnot-manifests (npm)

MAL-2026-1578

Malicious code in browser-gaming-client (npm)

MAL-2026-1579

Malicious code in nf-cl-ls (npm)

MAL-2026-1576

Malicious code in chai-as-constrained (npm)

MAL-2026-1881

Malicious code in zip.js-2.8.2 (npm)

MAL-2026-1880

Malicious code in zero-develop-component-library (npm)

MAL-2026-1879

Malicious code in yahoo-commerce (npm)