Supply Chain Incidents

MAL-2026-821

Malicious code in jwtdotenv (npm)

MAL-2026-819

Malicious code in json-mapping-sources (npm)

MAL-2026-820

Malicious code in json-web-sources (npm)

MAL-2026-822

Malicious code in react-svg-handler (npm)

MAL-2026-816

Malicious code in @skyeng/libs (npm)

MAL-2026-806

Malicious code in web3-chain-sinon (npm)

MAL-2026-807

Malicious code in web3-sinon (npm)

MAL-2026-805

Malicious code in aligned-arrays (npm)

MAL-2026-804

Malicious code in breadcrumb-service (npm)

MAL-2026-797

Malicious code in @rsgweb/modules-core-feedback (npm)

MAL-2026-798

Malicious code in @rsgweb/modules-core-www-page (npm)

MAL-2026-800

Malicious code in @rsgweb/tina (npm)

MAL-2026-799

Malicious code in @rsgweb/rockstar-account (npm)

MAL-2026-801

Malicious code in @rsgweb/utils (npm)

MAL-2026-796

Malicious code in @rdxportal/ui-components (npm)

MAL-2026-802

Malicious code in @sbseg-plugin/qbo-web-app-ui (npm)

MAL-2026-795

Malicious code in @opposhop/nuxt-ssr-cache (npm)

MAL-2026-792

Malicious code in @meli-lint/eslint-config-base (npm)

MAL-2026-791

Malicious code in @hashicorp-internal/vault-reporting (npm)

MAL-2026-794

Malicious code in @meli-lint/eslint-config-tests-jest (npm)

MAL-2026-793

Malicious code in @meli-lint/eslint-config-base-ts (npm)

MAL-2026-789

Malicious code in syf-typings (npm)

MAL-2026-787

Malicious code in @sporting-life/sportinglife-be (npm)

MAL-2026-788

Malicious code in @sporting-life/sportinglife-betslip-sdk (npm)