Supply Chain Incidents

MAL-2026-79

Malicious code in seanp-test-package-do-not-use2 (npm)

MAL-2026-72

Malicious code in bignumber.js-new (npm)

MAL-2026-81

Malicious code in upgrade-mobile (npm)

MAL-2026-76

Malicious code in open-telemetry-mini-client (npm)

MAL-2026-78

Malicious code in react-native-kyc (npm)

MAL-2026-73

Malicious code in chai-as-required (npm)

MAL-2026-71

Malicious code in redis-request-parser (npm)

MAL-2026-70

Malicious code in @shop-cicd/webpack-package-artifact (npm)

MAL-2026-68

Malicious code in n8n-nodes-performance-metrics (npm)

MAL-2026-69

Malicious code in n8n-performance-metrics (npm)

MAL-2026-67

Malicious code in redis-cookie-parser (npm)

MAL-2026-66

Malicious code in redis-cookie-js (npm)

MAL-2026-58

Malicious code in eslint-supertest (npm)

MAL-2026-63

Malicious code in oj-sp-common-util (npm)

MAL-2026-65

Malicious code in oj-sp-messages-banner (npm)

MAL-2026-64

Malicious code in oj-sp-css-additions (npm)

MAL-2026-62

Malicious code in oj-sp-common-strings (npm)

MAL-2026-60

Malicious code in oj-sp-about-page (npm)

MAL-2026-61

Malicious code in oj-sp-common (npm)

MAL-2026-59

Malicious code in hello-world-npm-demo-example (npm)

MAL-2026-57

Malicious code in react-transition-group-legacy (npm)

MAL-2026-56

Malicious code in @crepo/crepo-url-query-mapper (npm)

MAL-2026-50

Malicious code in faceplate-ui (npm)

MAL-2026-49

Malicious code in diskho (npm)