Supply Chain Incidents

MAL-2026-95

Malicious code in x-clients-features (npm)

MAL-2026-94

Malicious code in shopify-perf-kit (npm)

MAL-2026-91

Malicious code in okta-auth-js (npm)

MAL-2026-87

Malicious code in electra-web-player-event (npm)

MAL-2026-86

Malicious code in electra-web-player (npm)

MAL-2026-93

Malicious code in okta-signin-widget (npm)

MAL-2026-92

Malicious code in okta-loginpage-render (npm)

MAL-2026-90

Malicious code in matic-transfer-consumer (npm)

MAL-2026-89

Malicious code in importmap-polyfil (npm)

MAL-2026-77

Malicious code in polymarket-clob (npm)

MAL-2026-75

Malicious code in ethos2.0 (npm)

MAL-2026-83

Malicious code in wikibuy-mobile-analytics (npm)

MAL-2026-81

Malicious code in upgrade-mobile (npm)

MAL-2026-79

Malicious code in seanp-test-package-do-not-use2 (npm)

MAL-2026-76

Malicious code in open-telemetry-mini-client (npm)

MAL-2026-80

Malicious code in smartspacestoreapp (npm)

MAL-2026-78

Malicious code in react-native-kyc (npm)

MAL-2026-82

Malicious code in wikibuy-mobile (npm)

MAL-2026-74

Malicious code in cp_amm (npm)

MAL-2026-72

Malicious code in bignumber.js-new (npm)

MAL-2026-73

Malicious code in chai-as-required (npm)

MAL-2026-71

Malicious code in redis-request-parser (npm)

MAL-2026-70

Malicious code in @shop-cicd/webpack-package-artifact (npm)

MAL-2026-68

Malicious code in n8n-nodes-performance-metrics (npm)