Supply Chain Incidents

MAL-2026-16063

Malicious code in alloy-graphql (npm)

MAL-2026-16060

Malicious code in selfcerts (npm)

MAL-2026-16059

Malicious code in rojo-rbx (npm)

MAL-2026-16053

Malicious code in file-type-detector (npm)

MAL-2026-16054

Malicious code in gloggo (npm)

MAL-2026-16055

Malicious code in sonmors (npm)

MAL-2026-16058

Malicious code in vinzz-wcli (npm)

MAL-2026-16057

Malicious code in toru-ultimate (npm)

MAL-2026-16056

Malicious code in tailwind-aspect-styles (npm)

MAL-2026-16052

Malicious code in open-item-validator (npm)

MAL-2026-16050

Malicious code in @aspect-adv-ui/consent-manager (npm)

MAL-2026-16051

Malicious code in @umschool/analytics (npm)

MAL-2026-16049

Malicious code in tailwindcss-aspectratio-styles (npm)

MAL-2026-16048

Malicious code in punypump (npm)

MAL-2026-16047

Malicious code in @usemosaik/template-react-js (npm)

MAL-2026-16045

Malicious code in i18nexus (npm)

MAL-2026-16046

Malicious code in i18nexus-tools (npm)

MAL-2026-16043

Malicious code in @web2apk/baileys (npm)

MAL-2026-16042

Malicious code in krdpass-auth-react-native (npm)

MAL-2026-16199

Malicious code in plogme (npm)

MAL-2026-16015

Malicious code in @cp-shared-14/frontend-ui (npm)

MAL-2026-16019

Malicious code in @aircanada/core (npm)

MAL-2026-16020

Malicious code in @aircanada/navigation-handler (npm)

MAL-2026-16018

Malicious code in @aircanada/components (npm)