Supply Chain Incidents

MAL-2026-672

Malicious code in baileys-dtz (npm)

MAL-2026-671

Malicious code in cheerio-core (npm)

MAL-2026-670

Malicious code in aligned-array (npm)

MAL-2026-663

Malicious code in transform-async-generator-functions (npm)

MAL-2026-667

Malicious code in typed-document-node (npm)

MAL-2026-664

Malicious code in transform-es2015-modules-amd (npm)

MAL-2026-668

Malicious code in typescript-react-apollo (npm)

MAL-2026-665

Malicious code in transform-exponentiation-operator (npm)

MAL-2026-666

Malicious code in transform-react-display-name (npm)

MAL-2026-661

Malicious code in netlify-project-helper (npm)

MAL-2026-660

Malicious code in dns-troubleshoot-toolkit-xyz123 (npm)

MAL-2026-669

Malicious code in vite-ui-components (npm)

MAL-2026-658

Malicious code in ansi-universal-ui (npm)

MAL-2026-659

Malicious code in atg-atgse (npm)

MAL-2026-662

Malicious code in researchpoc (npm)

MAL-2026-657

Malicious code in react-dnd-legacy-html5-backend (npm)

MAL-2026-656

Malicious code in jshint-groups (npm)

MAL-2026-646

Malicious code in picking-miniapp (npm)

MAL-2026-647

Malicious code in react-native-expofp (npm)

MAL-2026-644

Malicious code in dise-pkt (npm)

MAL-2026-643

Malicious code in @hemanshu_patil/xcode-windows-x64 (npm)

MAL-2026-642

Malicious code in @hemanshu_patil/xcode (npm)

MAL-2026-645

Malicious code in libsignal-yazxzpedia (npm)

MAL-2026-648

Malicious code in yazxzpedia (npm)