Supply Chain Incidents

MAL-2026-12813

Malicious code in twilio-functions (npm)

MAL-2026-12800

Malicious code in sc-font-icons (npm)

MAL-2026-12804

Malicious code in store-locator-widget (npm)

MAL-2026-12509

Malicious code in @shiftmarkets/shift-exchange-root (npm)

MAL-2026-12513

Malicious code in async-mutex-lock (npm)

MAL-2026-12508

Malicious code in @shiftmarkets/no-brainer-sdk (npm)

MAL-2026-12669

Malicious code in dbk-ui-forms (npm)

MAL-2026-12512

Malicious code in appsignal (npm)

MAL-2026-12504

Malicious code in @cy4dev/cydemo-bg-color (npm)

MAL-2026-12806

Malicious code in streak-core-bucket (npm)

MAL-2026-12484

Malicious code in trailserver (npm)

MAL-2026-12496

Malicious code in voicemail (npm)

MAL-2026-12397

Malicious code in luluking (npm)

MAL-2026-12338

Malicious code in alpha-helper (npm)

MAL-2026-12325

Malicious code in @nextco/utils (npm)

MAL-2026-12465

Malicious code in streak-daykey-lib (npm)

MAL-2026-12435

Malicious code in sc-geeksquad-core (npm)

MAL-2026-12316

Malicious code in @cryptosrvc/shift-exchange-root (npm)

MAL-2026-12491

Malicious code in uploader-frontend (npm)

MAL-2026-12492

Malicious code in uploader-frontend-legacy (npm)

MAL-2026-12358

Malicious code in croft-node (npm)

MAL-2026-12395

Malicious code in jquery.ui.tabs (npm)

MAL-2026-12403

Malicious code in node-cache-multithread (npm)

MAL-2026-12430

Malicious code in rollup-plugins-polyfills-rode (npm)