Supply Chain Incidents

MAL-2026-3255

Malicious code in @enterprise-core/auth-gateway-bridge (npm)

MAL-2026-3262

Malicious code in react-native-parallax-scroll-view-updated (npm)

MAL-2026-3256

Malicious code in @internal-infra/core-sso-bridge (npm)

MAL-2026-3164

Malicious code in chai-as-char (npm)

MAL-2026-3165

Malicious code in chai-as-redeployed (npm)

MAL-2026-3181

Malicious code in period-newline (npm)

MAL-2026-3182

Malicious code in redeem-onchain-sdk (npm)

MAL-2026-3180

Malicious code in nicegui (npm)

MAL-2026-3178

Malicious code in @cap-js/sqlite (npm)

MAL-2026-3177

Malicious code in @cap-js/postgres (npm)

MAL-2026-3179

Malicious code in mbt (npm)

MAL-2026-3176

Malicious code in @cap-js/db-service (npm)

MAL-2026-3161

Malicious code in apple-internal-telemetry-service (npm)

MAL-2026-3157

Malicious code in apple-internal-auth-v3 (npm)

MAL-2026-3151

Malicious code in apple-cloud-infrastructure-monitor (npm)

MAL-2026-3159

Malicious code in apple-internal-pki-trust-v5 (npm)

MAL-2026-3160

Malicious code in apple-internal-pki-utils (npm)

MAL-2026-3158

Malicious code in apple-internal-pki-trust (npm)

MAL-2026-3150

Malicious code in apple-cktool-api-v2 (npm)

MAL-2026-3154

Malicious code in apple-infra-gcp-leak (npm)

MAL-2026-3163

Malicious code in npm-global-util (npm)

MAL-2026-3155

Malicious code in apple-infra-network-v2 (npm)

MAL-2026-3153

Malicious code in apple-infra-final-escape (npm)

MAL-2026-3162

Malicious code in apple-pki-cert-validator (npm)