Supply Chain Incidents

MAL-2026-3010

Malicious code in separadordeinfocc (npm)

MAL-2026-3013

Malicious code in undicy-http (npm)

MAL-2026-3011

Malicious code in ts-bing (npm)

MAL-2026-3014

Malicious code in vime-azl (npm)

MAL-2026-3009

Malicious code in rollup-plugin-polyfill-route (npm)

MAL-2026-3003

Malicious code in @amsterdam-local/forms-component-library (npm)

MAL-2026-3012

Malicious code in ts-moduler (npm)

MAL-2026-3002

Malicious code in lyrox (PyPI)

MAL-2026-3001

Malicious code in process-support (PyPI)

MAL-2026-3000

Malicious code in xinference (PyPI)

MAL-2026-2998

Malicious code in @spinstorm/shared (npm)

MAL-2026-2999

Malicious code in pypdf-fork (PyPI)

MAL-2026-2997

Malicious code in @stlm/common-ui (npm)

MAL-2026-2995

Malicious code in color-studio (npm)

MAL-2026-2996

Malicious code in sparkling-sdk (npm)

MAL-2026-2993

Malicious code in @openwebconcept/design-tokens (npm)

MAL-2026-2994

Malicious code in @openwebconcept/theme-owc (npm)

MAL-2026-2992

Malicious code in @automagik/genie (npm)

MAL-2026-2991

Malicious code in pgserve (npm)

MAL-2026-2985

Malicious code in @bmg-web/bmg-dialog (npm)

MAL-2026-2983

Malicious code in @bmg-web/bmg-checkbox (npm)

MAL-2026-2990

Malicious code in etsyapp (npm)

MAL-2026-2984

Malicious code in @bmg-web/bmg-collapse (npm)

MAL-2026-2988

Malicious code in @bmg-web/bmg-grid (npm)