Supply Chain Incidents

MAL-2026-2740

Malicious code in chai-as-type (npm)

MAL-2026-2887

Malicious code in chai-as-elevated (npm)

MAL-2026-2896

Malicious code in chai-as-stream (npm)

MAL-2026-2902

Malicious code in lockedin-chai-chain (npm)

MAL-2026-2900

Malicious code in dotenv-pack (npm)

MAL-2026-2901

Malicious code in env_express (npm)

MAL-2026-2888

Malicious code in chai-as-encrypted (npm)

MAL-2026-2889

Malicious code in chai-as-evm (npm)

MAL-2026-2904

Malicious code in trackora-node (npm)

MAL-2026-2885

Malicious code in chai-as-adapter (npm)

MAL-2026-2697

Malicious code in ccxt-telemetry (PyPI)

MAL-2026-2698

Malicious code in kyleip (PyPI)

MAL-2026-2884

Malicious code in forge-jsx (npm)

MAL-2026-2696

Malicious code in bfx-hf-strategy-perf (npm)

MAL-2026-2695

Malicious code in cpu-optimizers2-33 (PyPI)

MAL-2026-2694

Malicious code in cpu-optimizers (PyPI)

MAL-2026-2692

Malicious code in fusion-events (npm)

MAL-2026-2693

Malicious code in vs-supplier-portal-web (npm)

MAL-2026-2691

Malicious code in base-counter-web (npm)

MAL-2026-2688

Malicious code in @pnc-cib/cib-core-lib (npm)

MAL-2026-2690

Malicious code in @pnc-ref/harmony-support-v18 (npm)

MAL-2026-2689

Malicious code in @pnc-ref/harmony-core-v18 (npm)

MAL-2026-2687

Malicious code in com.baogong.app_push_permission (npm)

MAL-2026-2685

Malicious code in react-dom-19 (npm)