Supply Chain Incidents

MAL-2026-288

Malicious code in insightvm-ui-nav-menus (npm)

MAL-2026-306

Malicious code in sd-cip-module-client (npm)

MAL-2026-308

Malicious code in sd-navbar-module-client (npm)

MAL-2026-282

Malicious code in experian-design-system (npm)

MAL-2026-255

Malicious code in haqawi (PyPI)

MAL-2026-256

Malicious code in legendevil1 (PyPI)

MAL-2026-254

Malicious code in hairest (PyPI)

MAL-2026-258

Malicious code in webmd-page-common (npm)

MAL-2026-253

Malicious code in clipcord (PyPI)

MAL-2026-252

Malicious code in solana-program (PyPI)

MAL-2026-251

Malicious code in soupclaw (PyPI)

MAL-2026-257

Malicious code in silvermine (npm)

MAL-2026-250

Malicious code in transitive-req (PyPI)

MAL-2026-247

Malicious code in ts-tweetnacl (npm)

MAL-2026-246

Malicious code in admin1001 (npm)

MAL-2026-248

Malicious code in dify-api (PyPI)

MAL-2026-249

Malicious code in @flipster/utils (npm)

MAL-2026-245

Malicious code in cnamts-captcha-component (npm)

MAL-2026-244

Malicious code in helium-module (npm)

MAL-2026-243

Malicious code in francium-web-visitors (npm)

MAL-2026-241

Malicious code in francium-ui (npm)

MAL-2026-242

Malicious code in francium-utils (npm)

MAL-2026-240

Malicious code in extended-path (npm)

MAL-2026-239

Malicious code in chai-as-enhanced (npm)