Supply Chain Incidents

MAL-2026-2640

Malicious code in bytefrontier-core (npm)

MAL-2026-2652

Malicious code in onewin-landing (npm)

MAL-2026-2661

Malicious code in vip-landing (npm)

MAL-2026-2643

Malicious code in ms-affiliate-links (npm)

MAL-2026-2639

Malicious code in bytefrontier (npm)

MAL-2026-2660

Malicious code in use-feature-flags-plugin (npm)

MAL-2026-2638

Malicious code in billing-paywidget (npm)

MAL-2026-2650

Malicious code in one-sdui (npm)

MAL-2026-2651

Malicious code in one-translations (npm)

MAL-2026-2655

Malicious code in tailwind-lines-clamp (npm)

MAL-2026-2634

Malicious code in percy-cake-docker (npm)

MAL-2026-2930

Malicious code in path-internal (npm)

MAL-2026-2920

Malicious code in buffer-util-extend (npm)

MAL-2026-2929

Malicious code in path-extend (npm)

MAL-2026-2825

Malicious code in centralogger (npm)

MAL-2026-2826

Malicious code in dom-utils-lite (npm)

MAL-2026-2629

Malicious code in stacks-editor (npm)

MAL-2026-2626

Malicious code in getcardslib (npm)

MAL-2026-2632

Malicious code in magentaa11y (npm)

MAL-2026-2621

Malicious code in walmart-internal (npm)

MAL-2026-2589

Malicious code in @mx-shared/utils (npm)

MAL-2026-2581

Malicious code in @dtc-campaign-wizard/campaign-wizard (npm)

MAL-2026-2595

Malicious code in @sports-api/api-sdk (npm)

MAL-2026-2596

Malicious code in @spreadjs/js-calc (npm)