Supply Chain Incidents

MAL-2026-3298

Malicious code in ally-ccapi (npm)

nextjs-chat-with-ai-service

MAL-2026-3241

Malicious code in nextjs-chat-with-ai-service (npm)

apexpro

MAL-2026-3234

Malicious code in apexpro (npm)

apexomni

MAL-2026-3233

Malicious code in apexomni (npm)

ams-ssk

MAL-2026-3287

Malicious code in ams-ssk (npm)

common-tg-service

MAL-2026-3288

Malicious code in common-tg-service (npm)

codewhisperer-streaming

MAL-2026-3232

Malicious code in codewhisperer-streaming (npm)

bpmn-studio

MAL-2026-3306

Malicious code in bpmn-studio (npm)

archetype-style

MAL-2026-3215

Malicious code in archetype-style (npm)

update-db

MAL-2026-3315

Malicious code in update-db (npm)

update-browserslist

MAL-2026-3314

Malicious code in update-browserslist (npm)

browserslist-db

MAL-2026-3307

Malicious code in browserslist-db (npm)

common-roles

MAL-2026-3308

Malicious code in common-roles (npm)

apple-internal-security-library-v99

MAL-2026-3209

Malicious code in apple-internal-security-library-v99 (npm)

path-internal-util

MAL-2026-3312

Malicious code in path-internal-util (npm)

path-addon

MAL-2026-3311

Malicious code in path-addon (npm)

gweb-build-system

MAL-2026-3310

Malicious code in gweb-build-system (npm)

service-gateway

MAL-2026-3313

Malicious code in service-gateway (npm)

intercom-client

MAL-2026-3204

Malicious code in intercom-client (npm)

eslint-plugin-skyscanner-dates

MAL-2026-3202

Malicious code in eslint-plugin-skyscanner-dates (npm)

sirens-lament

MAL-2026-3200

Malicious code in sirens-lament (npm)

blackbeards-navigator

MAL-2026-3199

Malicious code in blackbeards-navigator (npm)

apple-internal-security-audit-v99

MAL-2026-3305

Malicious code in apple-internal-security-audit-v99 (npm)

react-dnd-14

MAL-2026-3196

Malicious code in react-dnd-14 (npm)