Supply Chain Incidents

MAL-2026-217

Malicious code in experimental-utils (npm)

MAL-2026-214

Malicious code in analytics-browser (npm)

MAL-2026-208

Malicious code in @gwp-gtmt-components/event-listener (npm)

MAL-2026-209

Malicious code in @t4i-cms-components/contact-card (npm)

MAL-2026-212

Malicious code in lyonscg (npm)

MAL-2026-210

Malicious code in @workleap-ai/shared (npm)

MAL-2026-211

Malicious code in @workleap-widgets/client (npm)

MAL-2026-207

Malicious code in yargs-js (npm)

MAL-2026-206

Malicious code in terser-js (npm)

MAL-2026-205

Malicious code in rxjs-js (npm)

MAL-2026-203

Malicious code in body-parser-js (npm)

MAL-2026-204

Malicious code in pako-js (npm)

MAL-2026-198

Malicious code in shopee-chat (npm)

MAL-2026-191

Malicious code in libc-dev (PyPI)

MAL-2026-190

Malicious code in conmiyagi-map (npm)

MAL-2026-189

Malicious code in oncecall (PyPI)

MAL-2026-194

Malicious code in mui7 (npm)

MAL-2026-196

Malicious code in oe-oauth (npm)

MAL-2026-202

Malicious code in wac-relay-runtime (npm)

MAL-2026-195

Malicious code in mui7icons (npm)

MAL-2026-199

Malicious code in vet-bones (npm)

MAL-2026-200

Malicious code in wac-react (npm)

MAL-2026-201

Malicious code in wac-react-dom (npm)

MAL-2026-197

Malicious code in resto_ui_components (npm)