Supply Chain Incidents

MAL-2026-12078

Malicious code in trezor-lib (npm)

MAL-2026-12067

Malicious code in hwi-lib (npm)

MAL-2026-12064

Malicious code in ckcc-protocol (npm)

MAL-2026-12059

Malicious code in bcore-bravo-eslint-config (npm)

MAL-2026-12068

Malicious code in ledger-lib (npm)

MAL-2026-12073

Malicious code in sso-tramvai-module-context-auth (npm)

MAL-2026-12062

Malicious code in boardwalk-js-tests (npm)

MAL-2026-12057

Malicious code in @zzzgenesis00/playwrite (npm)

MAL-2026-12063

Malicious code in checkout-create-pos-order-am (npm)

MAL-2026-12066

Malicious code in hubert-appointment-v2-task-create-am (npm)

MAL-2026-12061

Malicious code in bigops-eslint (npm)

MAL-2026-12065

Malicious code in greatcall-customers-commandapi (npm)

MAL-2026-12077

Malicious code in tinkoff-statist-browser-typed-client-sme.compliance.web.events (npm)

MAL-2026-12072

Malicious code in specials-obid-webpack (npm)

MAL-2026-12071

Malicious code in sotqa-test (npm)

MAL-2026-12069

Malicious code in nxify-unic (npm)

MAL-2026-12070

Malicious code in shopping-shared-atom-mobile-cart-counter (npm)

MAL-2026-12058

Malicious code in @zzzgenesis00/spl-token-utils (npm)

MAL-2026-12075

Malicious code in tinkoff-boxy-mobile-vivid-heading (npm)

MAL-2026-12076

Malicious code in tinkoff-cache-path (npm)

MAL-2026-12074

Malicious code in statist-browser-typed-client-nfs.grocery.mobile.events (npm)

MAL-2026-12038

Malicious code in bigops-customer (npm)

MAL-2026-12045

Malicious code in statist-browser-typed-client-hra.workplacer.events (npm)

MAL-2026-12037

Malicious code in bigops-create-manifest (npm)