Supply Chain Incidents

MAL-2026-727

Malicious code in z-shop-js-env (npm)

MAL-2026-728

Malicious code in z-shop-ui (npm)

MAL-2026-729

Malicious code in zalando-consent-api (npm)

MAL-2026-721

Malicious code in dotenv-embedded (npm)

MAL-2026-719

Malicious code in chai-async-promised (npm)

MAL-2026-723

Malicious code in http-emailjs (npm)

MAL-2026-724

Malicious code in https-emailjs (npm)

MAL-2026-718

Malicious code in @fxinternal/netdiagnostics (npm)

MAL-2026-722

Malicious code in express-groups-routes (npm)

MAL-2026-711

Malicious code in mongoose_update (npm)

MAL-2026-714

Malicious code in reactt-sdkk (npm)

MAL-2026-713

Malicious code in react-sdkk (npm)

MAL-2026-712

Malicious code in ongose (npm)

MAL-2026-715

Malicious code in rreact-sdk (npm)

MAL-2026-709

Malicious code in mongooose_update (npm)

MAL-2026-716

Malicious code in si-wsl (npm)

MAL-2026-710

Malicious code in mongooose_updated (npm)

MAL-2026-708

Malicious code in incode-kyc-backend (npm)

MAL-2026-707

Malicious code in js-unpack (npm)

MAL-2026-705

Malicious code in @devgandhi/cpp (npm)

MAL-2026-706

Malicious code in @devgandhi/healthpulse (npm)

MAL-2026-704

Malicious code in testing-package-xdsfdsfsc (npm)

MAL-2026-703

Malicious code in @x-clients/features (npm)

MAL-2026-702

Malicious code in serpapi-python (PyPI)