Supply Chain Incidents

MAL-2026-2739

Malicious code in ccip-starter-kit-hardhat (npm)

MAL-2026-2738

Malicious code in cardreadermgmtserv (npm)

MAL-2026-2737

Malicious code in business-data (npm)

MAL-2026-2736

Malicious code in buildkite-test-collector-vitest-example (npm)

MAL-2026-2735

Malicious code in buildkite-test-collector-playwright-example (npm)

MAL-2026-2734

Malicious code in buildkite-test-collector-mocha-example (npm)

MAL-2026-2733

Malicious code in buildkite-test-collector-jest-example (npm)

MAL-2026-2732

Malicious code in buildkite-test-collector-jasmine-example (npm)

MAL-2026-2731

Malicious code in buildkite-test-collector-cypress-example (npm)

MAL-2026-2730

Malicious code in browserstack-utils (npm)

MAL-2026-2729

Malicious code in apl-github-test (npm)

MAL-2026-2728

Malicious code in apl-announcements (npm)

MAL-2026-2727

Malicious code in agent-starter (npm)

MAL-2026-2726

Malicious code in agent-scheduler (npm)

MAL-2026-2725

Malicious code in agent-framework-web (npm)

MAL-2026-2724

Malicious code in agdebugger-frontend (npm)

MAL-2026-2723

Malicious code in actions-label-commenter (npm)

MAL-2026-2722

Malicious code in action-setup-enos (npm)

MAL-2026-2721

Malicious code in access-worker-test (npm)

MAL-2026-2720

Malicious code in aca-review-apps (npm)

MAL-2026-2719

Malicious code in @youcanneverguessthisonereally/test-pkg (npm)

MAL-2026-2718

Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

MAL-2026-2717

Malicious code in @tax-taxdev/tools-scripts (npm)

MAL-2026-2715

Malicious code in @mesh-atoms/typography (npm)