Supply Chain Incidents

MAL-2026-3055

Malicious code in @apple-pay-trust/validate-merchant (npm)

MAL-2026-3040

Malicious code in apollo-vertex (npm)

MAL-2026-3038

Malicious code in apollo-landing (npm)

MAL-2026-3039

Malicious code in process-app-task (npm)

MAL-2026-3072

Malicious code in @tw-models/storage (npm)

MAL-2026-3071

Malicious code in @tw-marionette/input (npm)

MAL-2026-3073

Malicious code in @tw-utils/static (npm)

MAL-2026-3037

Malicious code in standalone-apps (npm)

MAL-2026-3036

Malicious code in uipath-ui-widgets (npm)

MAL-2026-3082

Malicious code in kl-b2c-ui-kit (npm)

MAL-2026-3034

Malicious code in ort-moe (PyPI)

MAL-2026-3035

Malicious code in promptflow-runtime (PyPI)

MAL-2026-3068

Malicious code in @sbt_gitverse/analytics-client (npm)

MAL-2026-3033

Malicious code in tether-base (npm)

MAL-2026-3079

Malicious code in axis-ui-generator (npm)

MAL-2026-3076

Malicious code in axis-abc-search-address (npm)

MAL-2026-3074

Malicious code in axis-abc-portal-menu (npm)

MAL-2026-3075

Malicious code in axis-abc-search-account (npm)

MAL-2026-3078

Malicious code in axis-notification (npm)

MAL-2026-3077

Malicious code in axis-charts (npm)

MAL-2026-3032

Malicious code in js-component-explorer (npm)

MAL-2026-3069

Malicious code in @tochka-ui/foundation (npm)

MAL-2026-3083

Malicious code in elementary-data (PyPI)

MAL-2026-3060

Malicious code in @frengki0707/google-cloud-clone (npm)