Supply Chain Incidents

MAL-2026-2992

Malicious code in @automagik/genie (npm)

MAL-2026-2991

Malicious code in pgserve (npm)

MAL-2026-2985

Malicious code in @bmg-web/bmg-dialog (npm)

MAL-2026-2983

Malicious code in @bmg-web/bmg-checkbox (npm)

MAL-2026-2990

Malicious code in etsyapp (npm)

MAL-2026-2984

Malicious code in @bmg-web/bmg-collapse (npm)

MAL-2026-2988

Malicious code in @bmg-web/bmg-grid (npm)

MAL-2026-2981

Malicious code in @bmg-web/bmg-button (npm)

MAL-2026-2986

Malicious code in @bmg-web/bmg-dropdown (npm)

MAL-2026-2980

Malicious code in @bmg-web/bmg-ajax (npm)

MAL-2026-2989

Malicious code in @bmg-web-features/bmg-user-interaction-tracker (npm)

MAL-2026-2982

Malicious code in @bmg-web/bmg-card (npm)

MAL-2026-2987

Malicious code in @bmg-web/bmg-external-link (npm)

MAL-2026-2979

Malicious code in tsdoc-build-rig (npm)

MAL-2026-2978

Malicious code in @oec-settlement/react-router (npm)

MAL-2026-2975

Malicious code in crypto-keccak-js (npm)

MAL-2026-2977

Malicious code in ts-utils-dev (npm)

MAL-2026-2976

Malicious code in gleb-js (npm)

MAL-2026-2973

Malicious code in claudcode-cli (npm)

MAL-2026-2974

Malicious code in claudcode-mcp (npm)

MAL-2026-2972

Malicious code in aven_types (npm)

MAL-2026-2970

Malicious code in @usealloy/component-library (npm)

MAL-2026-2971

Malicious code in @usealloy/typegen (npm)

MAL-2026-2968

Malicious code in @bitunix/test (npm)