Supply Chain Incidents

MAL-2026-17896

Malicious code in xapi-lib (npm)

MAL-2026-17895

Malicious code in web-pixels-manager (npm)

MAL-2026-17894

Malicious code in idlive-face-capture-web-development (npm)

MAL-2026-17882

Malicious code in tailwindcss-uniform (npm)

MAL-2026-17876

Malicious code in @xxxfnbs21/hello-demo (npm)

MAL-2026-17888

Malicious code in @flexmr/utils (npm)

MAL-2026-17868

Malicious code in @kre64/hello-npm-test (npm)

MAL-2026-17879

Malicious code in @flexmr/ui (npm)

MAL-2026-17856

Malicious code in opencode2-linux-arm64-musl (npm)

MAL-2026-17852

Malicious code in opencode2 (npm)

MAL-2026-17855

Malicious code in opencode2-linux-arm64 (npm)

MAL-2026-17858

Malicious code in opencode2-linux-x64-musl (npm)

MAL-2026-17860

Malicious code in opencode2-windows-x64 (npm)

MAL-2026-17859

Malicious code in opencode2-windows-arm64 (npm)

MAL-2026-17857

Malicious code in opencode2-linux-x64 (npm)

MAL-2026-17853

Malicious code in opencode2-darwin-arm64 (npm)

MAL-2026-17854

Malicious code in opencode2-darwin-x64 (npm)

MAL-2026-17851

Malicious code in yoodan-github-single-ver-pkg (npm)

MAL-2026-17867

Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)

MAL-2026-17850

Malicious code in @chatest/baileys (npm)

MAL-2026-17849

Malicious code in brass-common (npm)

MAL-2026-17872

Malicious code in @newspage/lib-ng-async-routes-ui (npm)

MAL-2026-17869

Malicious code in @mntv-analysis/ui (npm)

MAL-2026-17870

Malicious code in @mntv-analysis/ui-components (npm)