Supply Chain Incidents

MAL-2026-325

Malicious code in marshel (PyPI)

MAL-2026-324

Malicious code in typedoc-plugin-fuel-variants (npm)

MAL-2026-323

Malicious code in eslint-plugin-fuel-react (npm)

MAL-2026-327

Malicious code in mapkit-example-vanillajs (npm)

MAL-2026-1036

Malicious code in uitil (PyPI)

MAL-2026-322

Malicious code in admin10001 (npm)

MAL-2026-321

Malicious code in flip-prx (npm)

MAL-2026-278

Malicious code in comstrap (npm)

MAL-2026-259

Malicious code in @riag-libs/pattern-library-react-hooks (npm)

MAL-2026-318

Malicious code in victim-package-a (npm)

MAL-2026-284

Malicious code in flag-v211 (npm)

MAL-2026-270

Malicious code in base-ui-vue3 (npm)

MAL-2026-279

Malicious code in dibels8-content (npm)

MAL-2026-293

Malicious code in lusha-micro-app-messages (npm)

MAL-2026-299

Malicious code in origin_response_handler (npm)

MAL-2026-262

Malicious code in @spx-smartsorting/vue (npm)

MAL-2026-280

Malicious code in dws-dx (npm)

MAL-2026-269

Malicious code in auc-2-lib (npm)

MAL-2026-304

Malicious code in sd-agent-toolbar-module-client (npm)

MAL-2026-316

Malicious code in tailwind-merge-v3 (npm)

MAL-2026-319

Malicious code in vue_frontend_rpc (npm)

MAL-2026-296

Malicious code in nyse-web-tools-common (npm)

MAL-2026-261

Malicious code in @spx-delivery/react (npm)

MAL-2026-268

Malicious code in assurance-common-components (npm)