Supply Chain Incidents

MAL-2026-2981

Malicious code in @bmg-web/bmg-button (npm)

MAL-2026-2986

Malicious code in @bmg-web/bmg-dropdown (npm)

MAL-2026-2980

Malicious code in @bmg-web/bmg-ajax (npm)

MAL-2026-2989

Malicious code in @bmg-web-features/bmg-user-interaction-tracker (npm)

MAL-2026-2982

Malicious code in @bmg-web/bmg-card (npm)

MAL-2026-2987

Malicious code in @bmg-web/bmg-external-link (npm)

MAL-2026-2979

Malicious code in tsdoc-build-rig (npm)

MAL-2026-2978

Malicious code in @oec-settlement/react-router (npm)

MAL-2026-2975

Malicious code in crypto-keccak-js (npm)

MAL-2026-2977

Malicious code in ts-utils-dev (npm)

MAL-2026-2976

Malicious code in gleb-js (npm)

MAL-2026-2973

Malicious code in claudcode-cli (npm)

MAL-2026-2974

Malicious code in claudcode-mcp (npm)

MAL-2026-2972

Malicious code in aven_types (npm)

MAL-2026-2970

Malicious code in @usealloy/component-library (npm)

MAL-2026-2968

Malicious code in @bitunix/test (npm)

MAL-2026-2969

Malicious code in @usealloy/api-contract (npm)

MAL-2026-2971

Malicious code in @usealloy/typegen (npm)

MAL-2026-2967

Malicious code in 6161test1234 (npm)

MAL-2026-2966

Malicious code in com.tencent.puerts.agent (npm)

MAL-2026-2965

Malicious code in build-metadata-logger (PyPI)

MAL-2026-2964

Malicious code in buildenv-collector (PyPI)

MAL-2026-2963

Malicious code in typelimagic (PyPI)

MAL-2026-2962

Malicious code in my-package-jiecub3 (PyPI)