Supply Chain Incidents

MAL-2026-3052

Malicious code in @alfa.life.mapp/app.web (npm)

MAL-2026-3031

Malicious code in swampo (PyPI)

MAL-2026-3065

Malicious code in @m0ntana/app.web (npm)

MAL-2026-3030

Malicious code in model-poc-suhail (npm)

MAL-2026-3028

Malicious code in amplitude-ma-ts (npm)

MAL-2026-3024

Malicious code in auth0-ui-components-docs (npm)

MAL-2026-3025

Malicious code in next-rwa (npm)

MAL-2026-3027

Malicious code in wrapped-logger-utils (npm)

MAL-2026-3026

Malicious code in sagat-core (npm)

MAL-2026-3023

Malicious code in test-pkg-jie (PyPI)

MAL-2026-3021

Malicious code in lightspark-js (npm)

MAL-2026-3022

Malicious code in jie-utility-package (PyPI)

MAL-2026-3020

Malicious code in @bitwarden/cli (npm)

MAL-2026-3018

Malicious code in microsoft-employee-experience (npm)

MAL-2026-3019

Malicious code in hls.js (npm)

MAL-2026-3017

Malicious code in react-spa-npm (npm)

MAL-2026-3016

Malicious code in amazon-q-developer-streaming-client (npm)

MAL-2026-3015

Malicious code in lyroxcoder (PyPI)

MAL-2026-3029

Malicious code in eth-logger (npm)

MAL-2026-3007

Malicious code in json-dec (npm)

MAL-2026-3008

Malicious code in json-spacer (npm)

MAL-2026-3004

Malicious code in @nklkas/hyperliquid (npm)

MAL-2026-3006

Malicious code in changelog-utils-structured-logger (npm)

MAL-2026-3005

Malicious code in changelog-cli-logger (npm)