Supply Chain Incidents

MAL-2026-734

Malicious code in xpack-subscription-test (npm)

MAL-2026-733

Malicious code in deuro-landing-page (npm)

MAL-2026-731

Malicious code in cicd-ppe-test (PyPI)

MAL-2026-732

Malicious code in gridifys (PyPI)

MAL-2026-717

Malicious code in partnerss (npm)

MAL-2026-725

Malicious code in json-mapping-source (npm)

MAL-2026-720

Malicious code in chai-grab (npm)

MAL-2026-728

Malicious code in z-shop-ui (npm)

MAL-2026-726

Malicious code in z-shop-event-bus (npm)

MAL-2026-729

Malicious code in zalando-consent-api (npm)

MAL-2026-730

Malicious code in zappr (npm)

MAL-2026-727

Malicious code in z-shop-js-env (npm)

MAL-2026-719

Malicious code in chai-async-promised (npm)

MAL-2026-721

Malicious code in dotenv-embedded (npm)

MAL-2026-723

Malicious code in http-emailjs (npm)

MAL-2026-724

Malicious code in https-emailjs (npm)

MAL-2026-718

Malicious code in @fxinternal/netdiagnostics (npm)

MAL-2026-722

Malicious code in express-groups-routes (npm)

MAL-2026-709

Malicious code in mongooose_update (npm)

MAL-2026-716

Malicious code in si-wsl (npm)

MAL-2026-714

Malicious code in reactt-sdkk (npm)

MAL-2026-713

Malicious code in react-sdkk (npm)

MAL-2026-712

Malicious code in ongose (npm)

MAL-2026-715

Malicious code in rreact-sdk (npm)