Supply Chain Incidents

MAL-2026-1233

Malicious code in projectrtert (npm)

MAL-2026-1231

Malicious code in @schedaero/shared (npm)

MAL-2026-1039

Malicious code in react-devtools-raycast (npm)

MAL-2026-1037

Malicious code in get-fonts (npm)

MAL-2026-1042

Malicious code in trae-browser-inspect (npm)

MAL-2026-1028

Malicious code in examplereactnative76 (npm)

MAL-2026-1026

Malicious code in rncalendareventsexample (npm)

MAL-2026-1027

Malicious code in rtxbbtyols (npm)

MAL-2026-1024

Malicious code in @protonme/routing (npm)

MAL-2026-1025

Malicious code in @unitedcapitalfinancialadvisors/finlife-component-library (npm)

MAL-2026-1020

Malicious code in @ai-studio-web/app (npm)

MAL-2026-1022

Malicious code in @coinmetro/app (npm)

MAL-2026-1023

Malicious code in @kiukicom/sidebar (npm)

MAL-2026-1021

Malicious code in @atg-aml-shared/kyc-domain (npm)

MAL-2026-1019

Malicious code in spark-audit-notify (PyPI)

MAL-2026-1018

Malicious code in do-not-install-this-package-003 (PyPI)

MAL-2026-1016

Malicious code in js-multer (npm)

MAL-2026-1014

Malicious code in chai-iotype (npm)

MAL-2026-1013

Malicious code in chai-as-pause (npm)

MAL-2026-1017

Malicious code in json-mapping-srcs (npm)

MAL-2026-1015

Malicious code in es1int-config (npm)

MAL-2026-1006

Malicious code in chai-tools (npm)

MAL-2026-1011

Malicious code in node-argon (npm)

MAL-2026-1005

Malicious code in argon-web3-chain (npm)