Supply Chain Incidents

MAL-2026-137

Malicious code in rt-da-classic-card-collection (npm)

MAL-2026-130

Malicious code in awsm-acslibs (npm)

MAL-2026-135

Malicious code in npe-toolkit-faves (npm)

MAL-2026-136

Malicious code in npe-toolkit-server-deps (npm)

MAL-2026-146

Malicious code in spark-ar-dynamic-mocks (npm)

MAL-2026-132

Malicious code in create-react-app-lambda (npm)

MAL-2026-138

Malicious code in rt-footer (npm)

MAL-2026-133

Malicious code in language-capirca (npm)

MAL-2026-145

Malicious code in spark-ar-core-libs (npm)

MAL-2026-144

Malicious code in scrollbar-stylecss (npm)

MAL-2026-148

Malicious code in tailwind-autoanimation (npm)

MAL-2026-128

Malicious code in lnatainstaller (PyPI)

MAL-2026-193

Malicious code in cko-ui-toolkit (npm)

MAL-2026-127

Malicious code in @bingads-webui-component-legacy/storage (npm)

MAL-2026-126

Malicious code in codefrequencychecker (PyPI)

MAL-2026-125

Malicious code in kmeet (npm)

MAL-2026-122

Malicious code in vjri (npm)

MAL-2026-111

Malicious code in aog3 (npm)

MAL-2026-121

Malicious code in syqara (npm)

MAL-2026-108

Malicious code in @nestor_hexom/garfield (npm)

MAL-2026-123

Malicious code in wifzap (npm)

MAL-2026-124

Malicious code in wwwt (npm)

MAL-2026-118

Malicious code in klywarn (npm)

MAL-2026-115

Malicious code in hiqomu (npm)