Supply Chain Incidents

MAL-2026-1564

Malicious code in transform-es2015-spread (npm)

MAL-2026-1565

Malicious code in transform-export-extensions (npm)

MAL-2026-1561

Malicious code in transform-es2015-duplicate-keys (npm)

MAL-2026-1550

Malicious code in syntax-export-extensions (npm)

MAL-2026-1548

Malicious code in syntax-class-constructor-call (npm)

MAL-2026-1549

Malicious code in syntax-do-expressions (npm)

MAL-2026-1551

Malicious code in syntax-function-bind (npm)

MAL-2026-1546

Malicious code in dazaar-payment (npm)

MAL-2026-1545

Malicious code in dazaar-cli (npm)

MAL-2026-1547

Malicious code in pear-wrk-wdk (npm)

MAL-2026-1552

Malicious code in typescript-nhost (npm)

MAL-2026-1556

Malicious code in yoshi-base (npm)

MAL-2026-1554

Malicious code in typescript-validation-schema (npm)

MAL-2026-1553

Malicious code in typescript-react-query (npm)

MAL-2026-1555

Malicious code in typescript-vue-apollo-smart-ops (npm)

MAL-2026-1544

Malicious code in rowrap (PyPI)

MAL-2026-1543

Malicious code in aniresolve (PyPI)

MAL-2026-1542

Malicious code in bugbounty-test-123 (npm)

MAL-2026-1539

Malicious code in relay-optimizer-plugin (npm)

MAL-2026-1541

Malicious code in urql-introspection (npm)

MAL-2026-1540

Malicious code in typescript-type-graphql (npm)

MAL-2026-1537

Malicious code in typescript-rtk-query (npm)

MAL-2026-1536

Malicious code in typescript-resolvers (npm)

MAL-2026-1518

Malicious code in ignore-html-and-css-imports (npm)