Supply Chain Incidents

MAL-2026-678

Malicious code in cookie-parsers-env (npm)

MAL-2026-676

Malicious code in @ikeacnalan/icons (npm)

MAL-2026-673

Malicious code in baileys-ud (npm)

MAL-2026-674

Malicious code in freedom-baileys (npm)

MAL-2026-672

Malicious code in baileys-dtz (npm)

MAL-2026-675

Malicious code in supun-baileys (npm)

MAL-2026-671

Malicious code in cheerio-core (npm)

MAL-2026-670

Malicious code in aligned-array (npm)

MAL-2026-665

Malicious code in transform-exponentiation-operator (npm)

MAL-2026-663

Malicious code in transform-async-generator-functions (npm)

MAL-2026-664

Malicious code in transform-es2015-modules-amd (npm)

MAL-2026-667

Malicious code in typed-document-node (npm)

MAL-2026-668

Malicious code in typescript-react-apollo (npm)

MAL-2026-666

Malicious code in transform-react-display-name (npm)

MAL-2026-661

Malicious code in netlify-project-helper (npm)

MAL-2026-660

Malicious code in dns-troubleshoot-toolkit-xyz123 (npm)

MAL-2026-669

Malicious code in vite-ui-components (npm)

MAL-2026-658

Malicious code in ansi-universal-ui (npm)

MAL-2026-659

Malicious code in atg-atgse (npm)

MAL-2026-662

Malicious code in researchpoc (npm)

MAL-2026-657

Malicious code in react-dnd-legacy-html5-backend (npm)

MAL-2026-656

Malicious code in jshint-groups (npm)

MAL-2026-655

Malicious code in pipeline-poision-test (PyPI)

MAL-2026-651

Malicious code in cat-admin-tool (PyPI)