Supply Chain Incidents

MAL-2026-12444

Malicious code in statist-browser-typed-client-coretech.web.metrics (npm)

MAL-2026-12493

Malicious code in utility-kit-ts (npm)

MAL-2026-12364

Malicious code in dolyame-boxy-atom-bnpl-store-button (npm)

MAL-2026-12440

Malicious code in sme-rko-finance-front-shared-entity-groups-models (npm)

MAL-2026-12487

Malicious code in travel-core-utils-object (npm)

MAL-2026-12501

Malicious code in william-data-formatter-x (npm)

MAL-2026-12460

Malicious code in streak-count-core (npm)

MAL-2026-12410

Malicious code in pfp-block-mobile-steps (npm)

MAL-2026-12377

Malicious code in express-mongo-santi (npm)

MAL-2026-12488

Malicious code in tt-help-cli-ycl (npm)

MAL-2026-12310

Malicious code in statist-browser-typed-client-sme.platform.web.teasers (npm)

MAL-2026-12309

Malicious code in statist-browser-typed-client-jumptaxi.feature.contacts (npm)

MAL-2026-12311

Malicious code in streak-calc-metrics (npm)

MAL-2026-12225

Malicious code in time-utils-helper (npm)

MAL-2026-12207

Malicious code in sme-auth-core (npm)

MAL-2026-12188

Malicious code in pfp-integration-mobile-heading (npm)

MAL-2026-12140

Malicious code in arbocrate-sla-prober-arbocrate-sla-prober-core (npm)

MAL-2026-12176

Malicious code in dateuuidv2 (npm)

MAL-2026-12180

Malicious code in geocode-quick (npm)

MAL-2026-12209

Malicious code in statist-browser-typed-client-ddp.mentat.ui.web (npm)

MAL-2026-12226

Malicious code in time-webkit-tag (npm)

MAL-2026-12213

Malicious code in statist-browser-typed-client-mb.product.sme.cards (npm)

MAL-2026-12181

Malicious code in hubert-react-query (npm)

MAL-2026-12224

Malicious code in tailwindcss-scrollbar-hide (npm)