Supply Chain Incidents

MAL-2026-3285

Malicious code in vpi-guides (npm)

MAL-2026-3277

Malicious code in edj-shopify-theme (npm)

MAL-2026-3272

Malicious code in @w3m-app/get_chain_id (npm)

MAL-2026-3273

Malicious code in @w3m-app/is_connected (npm)

MAL-2026-3274

Malicious code in @w3m-app/switch_network (npm)

MAL-2026-3270

Malicious code in @bcs-react-ui/select (npm)

MAL-2026-3271

Malicious code in @bcs-ui/theme (npm)

MAL-2026-3267

Malicious code in @bcs-bank-react-ui/swiper-slider (npm)

MAL-2026-3268

Malicious code in @bcs-mi/store (npm)

MAL-2026-3269

Malicious code in @bcs-react-ui/context-menu (npm)

MAL-2026-3265

Malicious code in @bcs-bank/common-constants (npm)

MAL-2026-3266

Malicious code in @bcs-bank/init (npm)

MAL-2026-3263

Malicious code in @bcs-adapters/core-adapter (npm)

MAL-2026-3264

Malicious code in @bcs-adapters/keycloak-api-adapter (npm)

MAL-2026-3322

Malicious code in microsoft-agents-auth-service (npm)

MAL-2026-3323

Malicious code in paypal-payouts-bridge (npm)

MAL-2026-3253

Malicious code in feature-flag-service (npm)

MAL-2026-3252

Malicious code in gauth-client (PyPI)

MAL-2026-3251

Malicious code in puan31 (PyPI)

MAL-2026-3250

Malicious code in rostilesolver (PyPI)

MAL-2026-3309

Malicious code in google-cloud-secret-manager-config-poc (npm)

MAL-2026-3249

Malicious code in internal-company-module-test-1337 (npm)

MAL-2026-3248

Malicious code in pwn-control (PyPI)

MAL-2026-3247

Malicious code in metoopro (PyPI)