Supply Chain Incidents

MAL-2026-12182

Malicious code in json-validator-utils (npm)

MAL-2026-12285

Malicious code in tramvai-module-feature-toggle (npm)

MAL-2026-12295

Malicious code in twork-data-services-procedure-engine-api-v1-procedure-info (npm)

MAL-2026-12178

Malicious code in fb-cards-form-no-resident-information (npm)

MAL-2026-12136

Malicious code in accounts-stores (npm)

MAL-2026-12189

Malicious code in react-scroll-disable (npm)

MAL-2026-12135

Malicious code in accounts-offers (npm)

MAL-2026-12129

Malicious code in accounts-appointment (npm)

MAL-2026-12130

Malicious code in accounts-card-design-picker (npm)

MAL-2026-12131

Malicious code in accounts-constants (npm)

MAL-2026-12132

Malicious code in accounts-ddos-shield (npm)

MAL-2026-12134

Malicious code in accounts-limits (npm)

MAL-2026-12218

Malicious code in tailwind-animation-founder (npm)

MAL-2026-12133

Malicious code in accounts-forms (npm)

MAL-2026-12223

Malicious code in tailwindcss-form-components (npm)

MAL-2026-12222

Malicious code in tailwind-opentype (npm)

MAL-2026-12221

Malicious code in tailwind-custom-forms (npm)

MAL-2026-12220

Malicious code in tailwind-animationpack (npm)

MAL-2026-12219

Malicious code in tailwind-animationgroup (npm)

MAL-2026-12179

Malicious code in fb-insurance--boxified-form-vzr-test (npm)

MAL-2026-12117

Malicious code in 1239i32049i (npm)

MAL-2026-12217

Malicious code in tailwind-animate-plugin (npm)

MAL-2026-12241

Malicious code in tinkoff-fb-fieldset-car-reference-kasko (npm)

MAL-2026-12265

Malicious code in tinkoff-statist-browser-typed-client-jumptaxi.feature.contacts (npm)