Supply Chain Incidents

MAL-2026-2638

Malicious code in billing-paywidget (npm)

MAL-2026-2643

Malicious code in ms-affiliate-links (npm)

MAL-2026-2639

Malicious code in bytefrontier (npm)

MAL-2026-2651

Malicious code in one-translations (npm)

MAL-2026-2655

Malicious code in tailwind-lines-clamp (npm)

MAL-2026-2634

Malicious code in percy-cake-docker (npm)

MAL-2026-2930

Malicious code in path-internal (npm)

MAL-2026-2630

Malicious code in gate-apis (PyPI)

MAL-2026-2920

Malicious code in buffer-util-extend (npm)

MAL-2026-2929

Malicious code in path-extend (npm)

MAL-2026-2825

Malicious code in centralogger (npm)

MAL-2026-2826

Malicious code in dom-utils-lite (npm)

MAL-2026-2629

Malicious code in stacks-editor (npm)

MAL-2026-2628

Malicious code in svchost (PyPI)

MAL-2026-2627

Malicious code in pckg-sv (PyPI)

MAL-2026-2626

Malicious code in getcardslib (npm)

MAL-2026-2632

Malicious code in magentaa11y (npm)

MAL-2026-2625

Malicious code in robase-install (PyPI)

MAL-2026-2624

Malicious code in asciitoart (PyPI)

MAL-2026-2623

Malicious code in hive-setting (PyPI)

MAL-2026-2621

Malicious code in walmart-internal (npm)

MAL-2026-2594

Malicious code in @spoonflower/ui (npm)

MAL-2026-2585

Malicious code in @hrb-web/nuxt (npm)

MAL-2026-2581

Malicious code in @dtc-campaign-wizard/campaign-wizard (npm)