Supply Chain Incidents

MAL-2026-2449

Malicious code in mgc (npm)

MAL-2026-2460

Malicious code in strapi-plugin-events (npm)

MAL-2026-2446

Malicious code in @corpweb-ui/wmkt-library (npm)

MAL-2026-2447

Malicious code in @toprank/partner (npm)

GHSA-3hfp-gqgh-xc5g

Axios supply chain attack - dependency in @lightdash/cli may resolve to compromised axios versions

GHSA-658g-p7jg-wx5g

Axios npm Supply Chain Incident Impacting @usebruno/cli

MAL-2026-2443

Malicious code in exprrrress (npm)

MAL-2026-2442

Malicious code in expreeeess (npm)

MAL-2026-2439

Malicious code in expeewas (npm)

MAL-2026-2445

Malicious code in pro-express (npm)

MAL-2026-2441

Malicious code in expirs (npm)

MAL-2026-2437

Malicious code in exaprse (npm)

MAL-2026-2444

Malicious code in exszpe3szs (npm)

MAL-2026-2435

Malicious code in 4xperss (npm)

MAL-2026-2438

Malicious code in expeedsxs (npm)

MAL-2026-2434

Malicious code in 4exepreds (npm)

MAL-2026-2436

Malicious code in eixp4ressz (npm)

MAL-2026-2440

Malicious code in experedzss (npm)

MAL-2026-2424

Malicious code in bytefrontier-sdk (npm)

MAL-2026-2428

Malicious code in vv-ftend-api (npm)

MAL-2026-2425

Malicious code in bytefrontier-tracker (npm)

MAL-2026-2426

Malicious code in partner-tracker (npm)

MAL-2026-2423

Malicious code in bytefrontier-partner (npm)

MAL-2026-2422

Malicious code in bytefrontier-api (npm)