Supply Chain Incidents

MAL-2026-12480

Malicious code in tms-x-headers (npm)

MAL-2026-12477

Malicious code in tcb-web-images (npm)

MAL-2026-12449

Malicious code in statist-browser-typed-client-mb.reliability.android.metrics (npm)

MAL-2026-12352

Malicious code in checkout-mobile-pay-button (npm)

MAL-2026-12330

Malicious code in @vboxdev/common (npm)

MAL-2026-12415

Malicious code in pfp-forms-sme-sitebuilder (npm)

MAL-2026-12408

Malicious code in pfp-block-independent-iframe (npm)

MAL-2026-12451

Malicious code in statist-browser-typed-client-rubliq.platform.keycloak (npm)

MAL-2026-12438

Malicious code in sme-crm-services-sme-crm-services-core (npm)

MAL-2026-12442

Malicious code in sso-tramvai-lib-roles (npm)

MAL-2026-12351

Malicious code in checkout-common-tokens (npm)

MAL-2026-12474

Malicious code in taiga-ui-proprietary-navigation (npm)

MAL-2026-12450

Malicious code in statist-browser-typed-client-risktech.uwfrontantifraud.events (npm)

MAL-2026-12390

Malicious code in hubert-document-actual-insurance-rules-am (npm)

MAL-2026-12433

Malicious code in saas-f-lego-landings (npm)

MAL-2026-12472

Malicious code in sui-migration-audit-rules (npm)

MAL-2026-12441

Malicious code in sme-scripts-shared-library-webpack-plugin (npm)

MAL-2026-12486

Malicious code in travel-core-typings-reducers (npm)

MAL-2026-12412

Malicious code in pfp-forms-independent-sme-glossary-anchor (npm)

MAL-2026-12396

Malicious code in log-min (npm)

MAL-2026-12448

Malicious code in statist-browser-typed-client-mb.product.operations (npm)

MAL-2026-12382

Malicious code in finance-business-company-id-models (npm)

MAL-2026-12324

Malicious code in @nasdtickets/common (npm)

MAL-2026-12456

Malicious code in statist-statist-core (npm)