Supply Chain Incidents

MAL-2026-59

Malicious code in hello-world-npm-demo-example (npm)

MAL-2026-57

Malicious code in react-transition-group-legacy (npm)

MAL-2026-56

Malicious code in @crepo/crepo-url-query-mapper (npm)

MAL-2026-50

Malicious code in faceplate-ui (npm)

MAL-2026-49

Malicious code in diskho (npm)

MAL-2026-48

Malicious code in shop-state (npm)

MAL-2026-44

Malicious code in @airtel-web/legos (npm)

MAL-2026-45

Malicious code in @signify/vue-components (npm)

MAL-2026-43

Malicious code in published_at (npm)

MAL-2026-41

Malicious code in spire.officejs-document (npm)

MAL-2026-39

Malicious code in spire.officejs-common (npm)

MAL-2026-40

Malicious code in spire.officejs-editors (npm)

MAL-2026-34

Malicious code in atm_bmw (npm)

MAL-2026-32

Malicious code in blobhunter-depconf-poc (npm)

MAL-2026-30

Malicious code in dstny-utils (npm)

MAL-2026-29

Malicious code in ipvision-selfcare (npm)

MAL-2026-19

Malicious code in jest-config-ibm-cloud-cognitive (npm)

MAL-2026-15

Malicious code in eslint-config-skynet (npm)

MAL-2026-22

Malicious code in pkg1bate5apg1 (npm)

MAL-2026-20

Malicious code in kid-api (npm)

MAL-2026-23

Malicious code in showdownxss (npm)

MAL-2026-13

Malicious code in ent-file-upload-widget-v2 (npm)

MAL-2026-24

Malicious code in tickncook-robot (npm)

MAL-2026-12

Malicious code in datatables-editor (npm)