Supply Chain Incidents

MAL-2026-2607

Malicious code in stats-api-js-client (npm)

MAL-2026-2602

Malicious code in etsy-advocacy (npm)

MAL-2026-2599

Malicious code in ccn-common-react-library (npm)

MAL-2026-2610

Malicious code in twilio-video.js (npm)

MAL-2026-2603

Malicious code in experian-design-system-themes (npm)

MAL-2026-2608

Malicious code in symphony-core (npm)

MAL-2026-2601

Malicious code in dwaiter-company-web (npm)

MAL-2026-2606

Malicious code in mdb-react-sortable (npm)

MAL-2026-2605

Malicious code in kaltura-ngx-client (npm)

MAL-2026-2577

Malicious code in @b2b-portal/kit (npm)

MAL-2026-2576

Malicious code in @b2b-portal/core (npm)

MAL-2026-2572

Malicious code in hiveos-setting (PyPI)

MAL-2026-2571

Malicious code in hiveos-settings (PyPI)

MAL-2026-2635

Malicious code in pubnub-element (npm)

MAL-2026-2631

Malicious code in babel-plugin-blocks (npm)

MAL-2026-2636

Malicious code in seaport-core-16 (npm)

MAL-2026-2633

Malicious code in markdownlint-rule-link-pattern (npm)

MAL-2026-2915

Malicious code in bitu-staking (npm)

MAL-2026-2567

Malicious code in pt-sc-demo-app (npm)

MAL-2026-2569

Malicious code in bloxy-api (PyPI)

MAL-2026-2568

Malicious code in pt-sc-logger (npm)

MAL-2026-2570

Malicious code in robase-app (PyPI)

MAL-2026-2613

Malicious code in upstart-offer-container (npm)

MAL-2026-2617

Malicious code in upstartautoretailadmin (npm)