Supply Chain Incidents

MAL-2026-455

Malicious code in @mailpoet/components (npm)

@mailpoet/eslint-config

MAL-2026-456

Malicious code in @mailpoet/eslint-config (npm)

@brl-laiwb/ng-laiwb-api

MAL-2026-452

Malicious code in @brl-laiwb/ng-laiwb-api (npm)

@alluxio/common-ui

MAL-2026-451

Malicious code in @alluxio/common-ui (npm)

csv-parsing-xz

MAL-2026-458

Malicious code in csv-parsing-xz (npm)

csv-parsing-xx

MAL-2026-457

Malicious code in csv-parsing-xx (npm)

rank253222

MAL-2026-448

Malicious code in rank253222 (npm)

tv-admin-commons

MAL-2026-439

Malicious code in tv-admin-commons (npm)

ts-tweetnacl-utils

MAL-2026-438

Malicious code in ts-tweetnacl-utils (npm)

lumo-api-client

MAL-2026-437

Malicious code in lumo-api-client (npm)

jquery-ajaxchimp

MAL-2026-436

Malicious code in jquery-ajaxchimp (npm)

aligntype

MAL-2026-435

Malicious code in aligntype (npm)

chai-async-test

MAL-2026-409

Malicious code in chai-async-test (npm)

dotenv-expanded

MAL-2026-415

Malicious code in dotenv-expanded (npm)

replicate-js

MAL-2026-427

Malicious code in replicate-js (npm)

weaviate-js

MAL-2026-434

Malicious code in weaviate-js (npm)

qdrant-js

MAL-2026-426

Malicious code in qdrant-js (npm)

plugin-react-swc

MAL-2026-424

Malicious code in plugin-react-swc (npm)

plugin-vue

MAL-2026-425

Malicious code in plugin-vue (npm)

babel-js

MAL-2026-407

Malicious code in babel-js (npm)

storage-types

MAL-2026-430

Malicious code in storage-types (npm)

nanoid-js

MAL-2026-418

Malicious code in nanoid-js (npm)

aws-crt-nodejs

MAL-2026-406

Malicious code in aws-crt-nodejs (npm)

debox-rn

MAL-2026-414

Malicious code in debox-rn (npm)