Supply Chain Incidents

MAL-2026-12425

Malicious code in react-table-core (npm)

MAL-2026-12439

Malicious code in sme-foundation-frame-manager (npm)

MAL-2026-12366

Malicious code in dolyame-boxy-independent-bnpl-open-api (npm)

MAL-2026-12373

Malicious code in eventea-diag (npm)

MAL-2026-12372

Malicious code in eth-crypto-utils (npm)

MAL-2026-12339

Malicious code in async-mutex-hook (npm)

MAL-2026-12375

Malicious code in evo-web-base-analytics-data (npm)

MAL-2026-12447

Malicious code in statist-browser-typed-client-mb.product.mclaccount (npm)

MAL-2026-12336

Malicious code in afisha-storybook-default (npm)

MAL-2026-12417

Malicious code in post-css-transfer (npm)

MAL-2026-12387

Malicious code in gekko-mev-bot (npm)

MAL-2026-12385

Malicious code in fry-page-maker-types (npm)

MAL-2026-12374

Malicious code in eventea-router (npm)

MAL-2026-12446

Malicious code in statist-browser-typed-client-itsa.digitalinterview.events (npm)

MAL-2026-12384

Malicious code in form-bnpl-dolyame-component-object (npm)

MAL-2026-12327

Malicious code in @offa-uwk/offa-uwk (npm)

MAL-2026-12343

Malicious code in bpm-foundation-feature-flags (npm)

MAL-2026-12478

Malicious code in test22221 (npm)

MAL-2026-12361

Malicious code in deposits-overnight (npm)

MAL-2026-12381

Malicious code in fb-hr-sites--boxified-form-meetup-subcribe (npm)

MAL-2026-12468

Malicious code in streak-math-kit (npm)

MAL-2026-12346

Malicious code in cardsmobile-collection (npm)

MAL-2026-12483

Malicious code in tracker-radar-detector (npm)

MAL-2026-12354

Malicious code in code-analyzer-mcp (npm)