Supply Chain Incidents

MAL-2026-1055

Malicious code in jslint-config (npm)

MAL-2026-1053

Malicious code in hardhat-node (npm)

MAL-2026-1058

Malicious code in zoddle (npm)

MAL-2026-1045

Malicious code in jest-node-paramset (npm)

MAL-2026-1047

Malicious code in ts-packer (npm)

MAL-2026-1046

Malicious code in jest-param-validator (npm)

MAL-2026-1051

Malicious code in corstoken (npm)

MAL-2026-1054

Malicious code in iosysredis (npm)

MAL-2026-1056

Malicious code in undicy-lint (npm)

MAL-2026-1044

Malicious code in awareness-demo-pkg (PyPI)

MAL-2026-1038

Malicious code in promanage (npm)

MAL-2026-1043

Malicious code in uuindex (npm)

MAL-2026-1035

Malicious code in neural-compressor-jax (PyPI)

MAL-2026-1034

Malicious code in chai-lite-lib (npm)

MAL-2026-1033

Malicious code in duer-js (npm)

MAL-2026-1031

Malicious code in react-svg-helper-fast (npm)

MAL-2026-1030

Malicious code in chai-as-utils (npm)

MAL-2026-1032

Malicious code in sample-custom-component (npm)

MAL-2026-1029

Malicious code in geocommunes-geoportal (PyPI)

MAL-2026-1230

Malicious code in @schedaero/react-core (npm)

MAL-2026-1232

Malicious code in @schedaero/yukon (npm)

MAL-2026-1228

Malicious code in @schedaero/bacon (npm)

MAL-2026-1229

Malicious code in @schedaero/net-common (npm)

MAL-2026-1234

Malicious code in uxproject11 (npm)