Supply Chain Incidents

MAL-2026-3297

Malicious code in ally-call-wait-time (npm)

MAL-2026-3289

Malicious code in @allybank/ally-sdk (npm)

MAL-2026-3294

Malicious code in ally-allowlist (npm)

MAL-2026-3291

Malicious code in @athena-portal/themes (npm)

MAL-2026-3299

Malicious code in ally-eagw-identity (npm)

MAL-2026-3295

Malicious code in ally-antivirus (npm)

MAL-2026-3292

Malicious code in @breeze-ai/ui-library (npm)

MAL-2026-3293

Malicious code in @breezeai-frontend/i18n-config (npm)

MAL-2026-3304

Malicious code in apcyber-test-package (npm)

MAL-2026-3246

Malicious code in win-update-helper-tool-v2 (PyPI)

MAL-2026-3245

Malicious code in system-update-tool (PyPI)

MAL-2026-3303

Malicious code in ally-whitelist (npm)

MAL-2026-3244

Malicious code in puan4 (PyPI)

MAL-2026-3290

Malicious code in @allyfinancial/allyfinancial-api (npm)

MAL-2026-3301

Malicious code in ally-json-threat-protect (npm)

MAL-2026-3302

Malicious code in ally-starter-api (npm)

MAL-2026-3300

Malicious code in ally-forms (npm)

MAL-2026-3298

Malicious code in ally-ccapi (npm)

MAL-2026-3296

Malicious code in ally-badges (npm)

MAL-2026-3243

Malicious code in puan3 (PyPI)

MAL-2026-3242

Malicious code in sf-vmeval-requests (PyPI)

MAL-2026-3241

Malicious code in nextjs-chat-with-ai-service (npm)

MAL-2026-3240

Malicious code in timesmcplib (PyPI)

MAL-2026-3239

Malicious code in timermcplib (PyPI)