Supply Chain Incidents

MAL-2026-12457

Malicious code in streak-bucket-core (npm)

MAL-2026-12420

Malicious code in prokit-core (npm)

MAL-2026-12409

Malicious code in pfp-block-mobile-past-meetup-list (npm)

MAL-2026-12406

Malicious code in pfa-errors (npm)

MAL-2026-12452

Malicious code in statist-browser-typed-client-sme.platform.mobile.voip.common.events (npm)

MAL-2026-12380

Malicious code in fb-forms-form-boilerplate-contacts (npm)

MAL-2026-12331

Malicious code in @wololasod/tiny-id (npm)

MAL-2026-12495

Malicious code in viem-toolkit (npm)

MAL-2026-12411

Malicious code in pfp-block-mobile-vacancy-description (npm)

MAL-2026-12312

Malicious code in @agenthub-ai/agent (npm)

MAL-2026-12469

Malicious code in streak-math-lib (npm)

MAL-2026-12322

Malicious code in @mgor/fw-canary-3333 (npm)

MAL-2026-12459

Malicious code in streak-core-insights (npm)

MAL-2026-12407

Malicious code in pfa-prettier-config (npm)

MAL-2026-12489

Malicious code in tui-react-tooltip (npm)

MAL-2026-12414

Malicious code in pfp-forms-sme-loan (npm)

MAL-2026-12476

Malicious code in tcb-web-header (npm)

MAL-2026-12463

Malicious code in streak-day-primitives (npm)

MAL-2026-12332

Malicious code in @zahlen/checkout-angular (npm)

MAL-2026-12464

Malicious code in streak-daybucket (npm)

MAL-2026-12389

Malicious code in github-app-sts-action (npm)

MAL-2026-12461

Malicious code in streak-daily-core (npm)

MAL-2026-12425

Malicious code in react-table-core (npm)

MAL-2026-12439

Malicious code in sme-foundation-frame-manager (npm)