Supply Chain Incidents

MAL-2026-7354

Malicious code in raeactjs (npm)

MAL-2026-7353

Malicious code in qreactjs (npm)

MAL-2026-7352

Malicious code in pull-request-comment-branch (npm)

MAL-2026-7351

Malicious code in private-packages-sharingsession (npm)

MAL-2026-7350

Malicious code in private-packages-sharing-sessionz (npm)

MAL-2026-7349

Malicious code in postgres-docker-utils (npm)

MAL-2026-7348

Malicious code in plugin-proposal (npm)

MAL-2026-7347

Malicious code in picnic-work-app-terms-of-use-nl (npm)

MAL-2026-7346

Malicious code in picnic-work-app-terms-of-use-fr (npm)

MAL-2026-7345

Malicious code in picnic-work-app-terms-of-use-de (npm)

MAL-2026-7343

Malicious code in picnic-store-design-system (npm)

MAL-2026-7344

Malicious code in picnic-store-page-platform (npm)

MAL-2026-7342

Malicious code in picnic-store-delivery-miniapp (npm)

MAL-2026-7341

Malicious code in picnic-store-basket-miniapp (npm)

MAL-2026-7340

Malicious code in picnic-decoder-generator (npm)

MAL-2026-7339

Malicious code in penny-core (npm)

MAL-2026-7338

Malicious code in pe3-ihm-plateforme (npm)

MAL-2026-7337

Malicious code in paypal-legal-components (npm)

MAL-2026-7336

Malicious code in oztxrk-mfa (npm)

MAL-2026-7335

Malicious code in ovault-evm (npm)

MAL-2026-7334

Malicious code in outer-package (npm)

MAL-2026-7333

Malicious code in oreactjs (npm)

MAL-2026-7332

Malicious code in options-msg (npm)

MAL-2026-7331

Malicious code in oidcsessioncheck-enduser (npm)