Supply Chain Incidents

MAL-2026-103

Malicious code in const-enum (npm)

MAL-2026-106

Malicious code in transform-decorators-legacy (npm)

MAL-2026-104

Malicious code in sort-imports-es6-autofix (npm)

MAL-2026-101

Malicious code in openblox-ts (npm)

MAL-2026-100

Malicious code in eslint-plugin-supertest (npm)

MAL-2026-102

Malicious code in redis-cookie-ts (npm)

MAL-2026-85

Malicious code in elastic-docs-v3-utilities (npm)

MAL-2026-88

Malicious code in evm-gateway-contracts-private (npm)

MAL-2026-84

Malicious code in code-review-frontend (npm)

MAL-2026-95

Malicious code in x-clients-features (npm)

MAL-2026-86

Malicious code in electra-web-player (npm)

MAL-2026-90

Malicious code in matic-transfer-consumer (npm)

MAL-2026-89

Malicious code in importmap-polyfil (npm)

MAL-2026-94

Malicious code in shopify-perf-kit (npm)

MAL-2026-91

Malicious code in okta-auth-js (npm)

MAL-2026-87

Malicious code in electra-web-player-event (npm)

MAL-2026-93

Malicious code in okta-signin-widget (npm)

MAL-2026-92

Malicious code in okta-loginpage-render (npm)

MAL-2026-77

Malicious code in polymarket-clob (npm)

MAL-2026-75

Malicious code in ethos2.0 (npm)

MAL-2026-80

Malicious code in smartspacestoreapp (npm)

MAL-2026-83

Malicious code in wikibuy-mobile-analytics (npm)

MAL-2026-82

Malicious code in wikibuy-mobile (npm)

MAL-2026-74

Malicious code in cp_amm (npm)