Supply Chain Incidents

MAL-2026-370

Malicious code in sezzle (npm)

MAL-2026-368

Malicious code in mw-proto-models (npm)

MAL-2026-373

Malicious code in webmd-debug (npm)

MAL-2026-369

Malicious code in mw-shared-utils (npm)

MAL-2026-372

Malicious code in webmd-cookie (npm)

MAL-2026-359

Malicious code in dreame-claude (npm)

MAL-2026-363

Malicious code in pl-global-ec-uikit (npm)

MAL-2026-364

Malicious code in shared-global-ec-uikit (npm)

MAL-2026-361

Malicious code in gu-global-ec-uikit (npm)

MAL-2026-360

Malicious code in excel-to-json-test (npm)

MAL-2026-367

Malicious code in uq-global-ec-uikit (npm)

MAL-2026-365

Malicious code in telia-eventapi-client (npm)

MAL-2026-366

Malicious code in testing-package-bose (npm)

MAL-2026-357

Malicious code in chai-bin (npm)

MAL-2026-362

Malicious code in health-check-node (npm)

MAL-2026-358

Malicious code in dot-env-buffer (npm)

MAL-2026-353

Malicious code in advanced-svg-fetcher (npm)

MAL-2026-354

Malicious code in dux-portal (npm)

MAL-2026-355

Malicious code in dux-portal-privacy (npm)

MAL-2026-356

Malicious code in react-server-dom-unbundled (npm)

MAL-2026-349

Malicious code in tutor_table (npm)

MAL-2026-348

Malicious code in react-native-webview-forked (npm)

MAL-2026-347

Malicious code in @bingads-webui-theme-2018/theme-fluent (npm)

MAL-2026-339

Malicious code in internallib_v355 (npm)