Supply Chain Incidents

MAL-2026-350

Malicious code in bnanainstaller (PyPI)

MAL-2026-349

Malicious code in tutor_table (npm)

MAL-2026-348

Malicious code in react-native-webview-forked (npm)

MAL-2026-347

Malicious code in @bingads-webui-theme-2018/theme-fluent (npm)

MAL-2026-339

Malicious code in internallib_v355 (npm)

MAL-2026-343

Malicious code in ofjaaah-internal-utils (npm)

MAL-2026-342

Malicious code in ofjaaah-build-tools (npm)

MAL-2026-344

Malicious code in ofjaaah-security-lib (npm)

MAL-2026-338

Malicious code in internal-company-sdk (npm)

MAL-2026-341

Malicious code in ofjaaah-auth-module (npm)

MAL-2026-345

Malicious code in private-payment-lib (npm)

MAL-2026-336

Malicious code in @cda-apps/source (npm)

MAL-2026-337

Malicious code in chai-as-executed (npm)

MAL-2026-340

Malicious code in libsignal-yazxzcode (npm)

MAL-2026-346

Malicious code in zod-js (npm)

MAL-2026-329

Malicious code in @brokenzzz/garfish (npm)

MAL-2026-335

Malicious code in wac-react-relay (npm)

MAL-2026-328

Malicious code in 1231dai (npm)

MAL-2026-331

Malicious code in cyrpto (npm)

MAL-2026-334

Malicious code in viem-js (npm)

MAL-2026-332

Malicious code in tailwin (npm)

MAL-2026-333

Malicious code in tronweb-tool (npm)

MAL-2026-330

Malicious code in @daffadeveloper/signal-node (npm)

MAL-2026-326

Malicious code in urlssser (PyPI)