Supply Chain Incidents

MAL-2026-1665

Malicious code in browser-compat-data (npm)

MAL-2026-1663

Malicious code in braze-content-card-island (npm)

MAL-2026-1664

Malicious code in brisk-web-ssr (npm)

MAL-2026-1662

Malicious code in blob-internal-security-test-f63eabf7 (npm)

MAL-2026-1661

Malicious code in blackstone-core (npm)

MAL-2026-1660

Malicious code in bis-schemas (npm)

MAL-2026-1658

Malicious code in bcp-security-update (npm)

MAL-2026-1659

Malicious code in bcp-security-updates (npm)

MAL-2026-1657

Malicious code in backstage-plugin-wpe-catalog (npm)

MAL-2026-1656

Malicious code in argonnode (npm)

MAL-2026-1655

Malicious code in aligntyper (npm)

MAL-2026-1654

Malicious code in aligntypeer (npm)

MAL-2026-1653

Malicious code in align-configer (npm)

MAL-2026-1652

Malicious code in alfasec (npm)

MAL-2026-1651

Malicious code in ai-fast-auto-trader (npm)

MAL-2026-1650

Malicious code in advertising-shared (npm)

MAL-2026-1649

Malicious code in advertising-podlet (npm)

MAL-2026-1648

Malicious code in advertising-events (npm)

MAL-2026-1647

Malicious code in adobe-tracking (npm)

MAL-2026-1646

Malicious code in abstract-http-request (npm)

MAL-2026-1645

Malicious code in aboba-initial (npm)

MAL-2026-1644

Malicious code in aboba-docker-check (npm)

MAL-2026-1643

Malicious code in @vampirchik147/libxmljs2 (npm)

MAL-2026-1642

Malicious code in @upstashed/context7-mcp (npm)