Supply Chain Incidents

MAL-2026-2334

Malicious code in argon-node (npm)

MAL-2026-2333

Malicious code in @pansycareful/github-helper (npm)

MAL-2026-2332

Malicious code in @hsbc-mfe/host (npm)

MAL-2026-2331

Malicious code in @girirajravichandran/corp-build-utils-poc (npm)

MAL-2026-2330

Malicious code in @fyxer-ai/shared (npm)

MAL-2026-2329

Malicious code in @abi-labs-frontend/standards (npm)

MAL-2026-2137

Malicious code in @one-site/europcar (npm)

MAL-2026-2128

Malicious code in express-session-vailidator (npm)

MAL-2026-2129

Malicious code in express-session-validator (npm)

MAL-2026-2132

Malicious code in sbx-mask (npm)

MAL-2026-2127

Malicious code in agoda-test-poc (npm)

MAL-2026-2130

Malicious code in fancode-web-app (npm)

MAL-2026-2136

Malicious code in yelp-react-component-rating (npm)

MAL-2026-2126

Malicious code in agoda-dep-confusion (npm)

MAL-2026-2134

Malicious code in yelp-biz-action-constants-js-generated (npm)

MAL-2026-2135

Malicious code in yelp-react-component-photo-upload (npm)

MAL-2026-2133

Malicious code in server-fpti (npm)

MAL-2026-2131

Malicious code in nemo-fpti (npm)

MAL-2026-2125

Malicious code in customerdigital-ui-components-lib (npm)

MAL-2026-2412

Malicious code in @wame/ngx-frf-utilities (npm)

MAL-2026-2411

Malicious code in @wame/ngx-adfs (npm)

MAL-2026-2418

Malicious code in tombac-chronos (npm)

MAL-2026-2410

Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)

MAL-2026-2409

Malicious code in @phonos/types (npm)