Supply Chain Incidents

MAL-2026-13218

Malicious code in aws-sdk-v4 (npm)

MAL-2026-13263

Malicious code in devplatform-spa-use-track (npm)

MAL-2026-13262

Malicious code in devplatform-spa-ui (npm)

MAL-2026-13260

Malicious code in devplatform-spa-plugin-s3 (npm)

MAL-2026-13266

Malicious code in devplatform-table (npm)

MAL-2026-13261

Malicious code in devplatform-spa-plugin-s3-router (npm)

MAL-2026-13265

Malicious code in devplatform-supafetch (npm)

MAL-2026-13264

Malicious code in devplatform-sre-devplatform-sre-core (npm)

MAL-2026-13273

Malicious code in devplatform-vite-plugin-gle (npm)

MAL-2026-13272

Malicious code in devplatform-vite-plugin-external (npm)

MAL-2026-13271

Malicious code in devplatform-utils (npm)

MAL-2026-13268

Malicious code in devplatform-test-pvm-is-odd (npm)

MAL-2026-13269

Malicious code in devplatform-ui-kit (npm)

MAL-2026-13283

Malicious code in dolyame-boxy-atom-bnpl-button (npm)

MAL-2026-13270

Malicious code in devplatform-ui-notification (npm)

MAL-2026-13274

Malicious code in devplatform-vite-plugin-preserve-css-modules (npm)

MAL-2026-13282

Malicious code in dolyame-boxy-atom-bnpl-badge (npm)

MAL-2026-13281

Malicious code in docsmate-docsmate-core (npm)

MAL-2026-13276

Malicious code in dippy-invertor (npm)

MAL-2026-13275

Malicious code in devplatform-zod-wip-api (npm)

MAL-2026-13279

Malicious code in docflow-cryptopro (npm)

MAL-2026-13285

Malicious code in dolyame-boxy-atom-bnpl-dangerously-html (npm)

MAL-2026-13278

Malicious code in dlp-dlp-core (npm)

MAL-2026-13286

Malicious code in dolyame-boxy-atom-bnpl-dolyame-button (npm)