Supply Chain Incidents

MAL-2026-1707

Malicious code in dev_ppe-test (npm)

MAL-2026-1706

Malicious code in ddddddd1d (npm)

MAL-2026-1705

Malicious code in dazz-redirects (npm)

MAL-2026-1704

Malicious code in date-fns-scripts (npm)

MAL-2026-1703

Malicious code in dataterminal-ui (npm)

MAL-2026-1702

Malicious code in d4sp (npm)

MAL-2026-1701

Malicious code in corp-sign-core-js (npm)

MAL-2026-1700

Malicious code in corp-internal-logger (npm)

MAL-2026-1699

Malicious code in constant-values (npm)

MAL-2026-1698

Malicious code in connect-me-icon (npm)

MAL-2026-1697

Malicious code in conduit-core (npm)

MAL-2026-1696

Malicious code in components-design-system (npm)

MAL-2026-1695

Malicious code in company-billing-sdk-bugbounty (npm)

MAL-2026-1694

Malicious code in collabs-merchants (npm)

MAL-2026-1693

Malicious code in coinbase-desktop-sdk (npm)

MAL-2026-1692

Malicious code in circuit-playground (npm)

MAL-2026-1691

Malicious code in chromecast-receiver (npm)

MAL-2026-1690

Malicious code in chain-promised-cli (npm)

MAL-2026-1689

Malicious code in chain-promised-async (npm)

MAL-2026-1687

Malicious code in chain-cli-promised (npm)

MAL-2026-1688

Malicious code in chain-promised (npm)

MAL-2026-1686

Malicious code in chain-argon (npm)

MAL-2026-1685

Malicious code in chai-types (npm)

MAL-2026-1684

Malicious code in chai-proxy (npm)