Supply Chain Incidents

MAL-2026-3328

Malicious code in pocpoc2626 (npm)

MAL-2026-3327

Malicious code in capacitor-plugin-service-worker (npm)

MAL-2026-3336

Malicious code in @channel_bot/xa0 (npm)

MAL-2026-3326

Malicious code in paychex-common-vendor-lib (npm)

MAL-2026-3325

Malicious code in cloudauth-sdk (PyPI)

MAL-2026-3324

Malicious code in randomchoicemas (PyPI)

MAL-2026-3337

Malicious code in @t-in-one/save_application_hid_to_storage (npm)

MAL-2026-3335

Malicious code in @bank-widgets/whats-new (npm)

MAL-2026-3320

Malicious code in @google-pay-trust/start (npm)

MAL-2026-3316

Malicious code in @apple-pay-trust/check-apple-pay (npm)

MAL-2026-3317

Malicious code in @apple-pay-trust/destroy (npm)

MAL-2026-3321

Malicious code in @montanatonytest/app.web (npm)

MAL-2026-3319

Malicious code in @google-pay-trust/init-google-pay-result (npm)

MAL-2026-3318

Malicious code in @b2b_blocker/hide_activation_error (npm)

MAL-2026-3276

Malicious code in accesso-angular-cache-buster (npm)

MAL-2026-3277

Malicious code in edj-shopify-theme (npm)

MAL-2026-3279

Malicious code in muenxo (npm)

MAL-2026-3280

Malicious code in pi-exa-mcp (npm)

MAL-2026-3281

Malicious code in pos-next-react-native (npm)

MAL-2026-3284

Malicious code in tinfoil-shops (npm)

MAL-2026-3286

Malicious code in wagner-horizon (npm)

MAL-2026-3285

Malicious code in vpi-guides (npm)

MAL-2026-3282

Malicious code in shopify-draggable (npm)

MAL-2026-3275

Malicious code in @kills_sh/bootstrap (npm)