Supply Chain Incidents

MAL-2026-3432

Malicious code in @mistralai/mistralai (npm)

MAL-2026-3430

Malicious code in cplace-bmw-emt-mvp (npm)

MAL-2026-3508

Malicious code in crypto-javascri (npm)

MAL-2026-3506

Malicious code in @mimecast-ui/charts (npm)

MAL-2026-3507

Malicious code in @mimecast-ui/components (npm)

MAL-2026-3427

Malicious code in @cplace-workflow-fe/cf-workflow (npm)

MAL-2026-3509

Malicious code in pp-react-v5 (npm)

MAL-2026-3423

Malicious code in byvendors (npm)

MAL-2026-3639

Malicious code in briantreehttp (npm)

MAL-2026-3415

Malicious code in ac-sasskit (npm)

MAL-2026-3422

Malicious code in rsflows-pexml (npm)

MAL-2026-3420

Malicious code in noon-contracts (npm)

MAL-2026-3412

Malicious code in post-purchase-bundler (npm)

MAL-2026-3410

Malicious code in @miurba/alcazaba (npm)

MAL-2026-3409

Malicious code in mw-filesystem-events-nodream (npm)

MAL-2026-3646

Malicious code in erslove (npm)

MAL-2026-3645

Malicious code in dit-envv (npm)

MAL-2026-3414

Malicious code in @rsi-community/hub-schema (npm)

MAL-2026-3404

Malicious code in @matjp/dvi-decode (npm)

MAL-2026-3416

Malicious code in apple-mycelium-fix (npm)

MAL-2026-3647

Malicious code in haswons (npm)

MAL-2026-3421

Malicious code in oneblk-design-system (npm)

MAL-2026-3418

Malicious code in devsite-youtube (npm)

MAL-2026-3400

Malicious code in typo-crypto (npm)