Supply Chain Incidents

MAL-2026-2725

Malicious code in agent-framework-web (npm)

MAL-2026-2724

Malicious code in agdebugger-frontend (npm)

MAL-2026-2723

Malicious code in actions-label-commenter (npm)

MAL-2026-2722

Malicious code in action-setup-enos (npm)

MAL-2026-2721

Malicious code in access-worker-test (npm)

MAL-2026-2720

Malicious code in aca-review-apps (npm)

MAL-2026-2719

Malicious code in @youcanneverguessthisonereally/test-pkg (npm)

MAL-2026-2718

Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

MAL-2026-2717

Malicious code in @tax-taxdev/tools-scripts (npm)

MAL-2026-2715

Malicious code in @mesh-atoms/typography (npm)

MAL-2026-2714

Malicious code in @gameforge/http-server (npm)

MAL-2026-2713

Malicious code in @fuego-tools/analytics (npm)

MAL-2026-2712

Malicious code in @evoja-web/redaction (npm)

MAL-2026-2711

Malicious code in @evoja-web/react-login (npm)

MAL-2026-2710

Malicious code in @evoja-web/create-react-project (npm)

MAL-2026-2709

Malicious code in @appleseed-apple/ac-sass-kit (npm)

MAL-2026-2708

Malicious code in @3stripes/toolkit (npm)

MAL-2026-2707

Malicious code in @3stripes/shared (npm)

MAL-2026-2706

Malicious code in @3stripes/sdk (npm)

MAL-2026-2704

Malicious code in @3stripes/config (npm)

MAL-2026-2705

Malicious code in @3stripes/core (npm)

MAL-2026-2703

Malicious code in @3stripes/components (npm)

MAL-2026-2907

Malicious code in nj-logger (npm)

MAL-2026-2913

Malicious code in vite-plugin-compress-plus (npm)