Supply Chain Incidents

MAL-2026-12318

Malicious code in @hoteldev/common (npm)

MAL-2026-12437

Malicious code in simplipayng (npm)

MAL-2026-12340

Malicious code in block_package (npm)

MAL-2026-12485

Malicious code in trapp-configuration (npm)

MAL-2026-12401

Malicious code in mcp-audit-sync-internal (npm)

MAL-2026-12370

Malicious code in eslint-plugin-vitest-ts (npm)

MAL-2026-12458

Malicious code in streak-calendar-core (npm)

MAL-2026-12341

Malicious code in bnpl-blocks-independent-bnpl-search (npm)

MAL-2026-12323

Malicious code in @nasddatax/common (npm)

MAL-2026-12490

Malicious code in uniswap-sdk-v4 (npm)

MAL-2026-12367

Malicious code in dolyame-ui-form (npm)

MAL-2026-12360

Malicious code in csv-parser-helper (npm)

MAL-2026-12393

Malicious code in invest-module-cookie (npm)

MAL-2026-12432

Malicious code in runtime-sentinel (npm)

MAL-2026-12369

Malicious code in elephant-array-utils (npm)

MAL-2026-12362

Malicious code in digital-interview-digital-interview-core (npm)

MAL-2026-12479

Malicious code in time-linters-webapp-eslint-config (npm)

MAL-2026-12350

Malicious code in chart-data-utils (npm)

MAL-2026-12443

Malicious code in statist-browser-typed-client-automlplatform.nlppl.searchy (npm)

MAL-2026-12423

Malicious code in react-fontawesome-icons (npm)

MAL-2026-12342

Malicious code in boxy-fixture-allure (npm)

MAL-2026-12467

Malicious code in streak-int-lib (npm)

MAL-2026-12421

Malicious code in pvm-autodoc (npm)

MAL-2026-12455

Malicious code in statist-browser-typed-client-twork.tsales.nitro.metrics (npm)