Supply Chain Incidents

MAL-2026-1659

Malicious code in bcp-security-updates (npm)

MAL-2026-1658

Malicious code in bcp-security-update (npm)

MAL-2026-1657

Malicious code in backstage-plugin-wpe-catalog (npm)

MAL-2026-1656

Malicious code in argonnode (npm)

MAL-2026-1655

Malicious code in aligntyper (npm)

MAL-2026-1654

Malicious code in aligntypeer (npm)

MAL-2026-1653

Malicious code in align-configer (npm)

MAL-2026-1652

Malicious code in alfasec (npm)

MAL-2026-1651

Malicious code in ai-fast-auto-trader (npm)

MAL-2026-1650

Malicious code in advertising-shared (npm)

MAL-2026-1649

Malicious code in advertising-podlet (npm)

MAL-2026-1648

Malicious code in advertising-events (npm)

MAL-2026-1647

Malicious code in adobe-tracking (npm)

MAL-2026-1646

Malicious code in abstract-http-request (npm)

MAL-2026-1645

Malicious code in aboba-initial (npm)

MAL-2026-1644

Malicious code in aboba-docker-check (npm)

MAL-2026-1643

Malicious code in @vampirchik147/libxmljs2 (npm)

MAL-2026-1642

Malicious code in @upstashed/context7-mcp (npm)

MAL-2026-1641

Malicious code in @uc-platform/user-service-client-ts (npm)

MAL-2026-1640

Malicious code in @uc-platform/auth (npm)

MAL-2026-1639

Malicious code in @uc-platform/advertisement-service-client (npm)

MAL-2026-1638

Malicious code in @tl-icons/core (npm)

MAL-2026-1637

Malicious code in @spot-dapp/web (npm)

MAL-2026-1636

Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm)