Supply Chain Incidents

MAL-2026-6648

Malicious code in @shopbop/api-models (npm)

MAL-2026-6662

Malicious code in cmp-api-stub (npm)

MAL-2026-6631

Malicious code in @mcconnect/mcc-common-lib (npm)

MAL-2026-6670

Malicious code in rc-icon (npm)

MAL-2026-6659

Malicious code in cdocs-data (npm)

MAL-2026-6602

Malicious code in @bapiweb-ux/bapi-header (npm)

MAL-2026-6668

Malicious code in player-theming (npm)

MAL-2026-6666

Malicious code in magwien.sys (npm)

MAL-2026-6623

Malicious code in @gartnerx/gx-npm-messenger-util (npm)

MAL-2026-6625

Malicious code in @grappi/automations (npm)

MAL-2026-6660

Malicious code in cdocs-markdoc (npm)

MAL-2026-6654

Malicious code in app-hotmart-blog-headless (npm)

MAL-2026-6667

Malicious code in player-core-ui (npm)

MAL-2026-6669

Malicious code in pvd3 (npm)

MAL-2026-6664

Malicious code in hrb-cas-auth-js (npm)

MAL-2026-6621

Malicious code in @flipbit2-bb/scope-test (npm)

MAL-2026-6661

Malicious code in clx-cookieparser (npm)

MAL-2026-6658

Malicious code in bundrix (npm)

MAL-2026-6656

Malicious code in authmatrix (npm)

MAL-2026-6655

Malicious code in auth-state-service (npm)

MAL-2026-6657

Malicious code in authsessionbridge (npm)

MAL-2026-6594

Malicious code in vkzmn (npm)

MAL-2026-6592

Malicious code in maplibre-gl-vue3 (npm)

MAL-2026-6588

Malicious code in endpointmap (npm)