Supply Chain Incidents

MAL-2026-12521

Malicious code in candy-candy-core (npm)

MAL-2026-12519

Malicious code in bs-bs-core (npm)

MAL-2026-12525

Malicious code in cards-forms-clone-credit-clone (npm)

MAL-2026-12523

Malicious code in cards-forms-cards-core-clone (npm)

MAL-2026-12535

Malicious code in cardsmobile-rs-api (npm)

MAL-2026-12520

Malicious code in caen-caen-core (npm)

MAL-2026-12538

Malicious code in certificates-revocation-sw (npm)

MAL-2026-12531

Malicious code in cardsmobile-data-utils (npm)

MAL-2026-12539

Malicious code in certificates-revocation-utils (npm)

MAL-2026-12529

Malicious code in cardsmobile-cardsmobile-core (npm)

MAL-2026-12533

Malicious code in cardsmobile-http (npm)

MAL-2026-12537

Malicious code in cbp-exchange-government-cbp-exchange-government-core (npm)

MAL-2026-12536

Malicious code in cardsmobile-storage (npm)

MAL-2026-12532

Malicious code in cardsmobile-event-emitter (npm)

MAL-2026-12534

Malicious code in cardsmobile-notifications (npm)

MAL-2026-12530

Malicious code in cardsmobile-command-utils (npm)

MAL-2026-12543

Malicious code in checkout-base-analytics-data (npm)

MAL-2026-12551

Malicious code in checkout-create-draft-agreement-am (npm)

MAL-2026-12546

Malicious code in checkout-cashback-logic (npm)

MAL-2026-12542

Malicious code in checkout-accounts-logic (npm)

MAL-2026-12541

Malicious code in checkout-accounts-holder (npm)

MAL-2026-12550

Malicious code in checkout-context (npm)

MAL-2026-12545

Malicious code in checkout-bnpl-logic (npm)

MAL-2026-12553

Malicious code in checkout-desktop-accounts (npm)