Supply Chain Incidents

MAL-2026-12470

Malicious code in streak-metricsa (npm)

MAL-2026-12383

Malicious code in foodi (npm)

MAL-2026-12475

Malicious code in tcb-web-copy-to-clipboard (npm)

MAL-2026-12462

Malicious code in streak-day-engine (npm)

MAL-2026-12454

Malicious code in statist-browser-typed-client-social.shorts.editor (npm)

MAL-2026-12413

Malicious code in pfp-forms-mobile-sme-group-tiles (npm)

MAL-2026-12314

Malicious code in @copilot-mcp/apex (npm)

MAL-2026-12333

Malicious code in @zahlen/checkout-react (npm)

MAL-2026-12453

Malicious code in statist-browser-typed-client-sme.rko.finance.web (npm)

MAL-2026-12445

Malicious code in statist-browser-typed-client-eventea.projects.pfpacquiring (npm)

MAL-2026-12466

Malicious code in streak-daykit (npm)

MAL-2026-12418

Malicious code in postcss-animate-css-vars (npm)

MAL-2026-12363

Malicious code in dolyame-boxy-atom-bnpl-email-form (npm)

MAL-2026-12391

Malicious code in hubert-verify-primary-email-am (npm)

MAL-2026-12365

Malicious code in dolyame-boxy-independent-bnpl-info-images (npm)

MAL-2026-12434

Malicious code in saas-f-testing (npm)

MAL-2026-12320

Malicious code in @lizhao1/memorax-code-internal (npm)

MAL-2026-12422

Malicious code in quorvex (npm)

MAL-2026-12428

Malicious code in rollup-packages-node-polyfills (npm)

MAL-2026-12500

Malicious code in warp-drive-internal-tooling (npm)

MAL-2026-12335

Malicious code in aegis-runtime (npm)

MAL-2026-12345

Malicious code in calendar-streak-core (npm)

MAL-2026-12347

Malicious code in ccxt-trading (npm)

MAL-2026-12328

Malicious code in @rentwise/common (npm)