Supply Chain Incidents

MAL-2026-521

Malicious code in hammer-jquery (npm)

MAL-2026-522

Malicious code in magento-coding-standard-eslint-plugin (npm)

MAL-2026-519

Malicious code in @afg-ikea/ikea-modals (npm)

MAL-2026-518

Malicious code in @afg-ikea/ikea-kiosk-related-components (npm)

MAL-2026-517

Malicious code in @afg-ikea/ikea-family-registration-module (npm)

MAL-2026-510

Malicious code in radishwxm5 (PyPI)

MAL-2026-509

Malicious code in @sommos/create-program-template-form-data (npm)

MAL-2026-508

Malicious code in cartos-dds-ui (npm)

MAL-2026-553

Malicious code in @snazah/davey (npm)

MAL-2026-507

Malicious code in tripica-library (npm)

MAL-2026-554

Malicious code in braintree-web-latest (npm)

MAL-2026-506

Malicious code in selenium-integration (PyPI)

MAL-2026-512

Malicious code in overstock-component-library (npm)

MAL-2026-516

Malicious code in overstock-login-layer (npm)

MAL-2026-511

Malicious code in ostk-otel-autoconfig (npm)

MAL-2026-513

Malicious code in overstock-component-library-v3 (npm)

MAL-2026-505

Malicious code in flask-hookserver (PyPI)

MAL-2026-504

Malicious code in researchpoc (PyPI)

MAL-2026-501

Malicious code in system-integration-toxi (PyPI)

MAL-2026-502

Malicious code in test-poc-package-for-session (PyPI)

MAL-2026-503

Malicious code in test-poc-package-for-session-2 (PyPI)

MAL-2026-500

Malicious code in zabittest11 (npm)

MAL-2026-499

Malicious code in system-integration (PyPI)

MAL-2026-498

Malicious code in instascan-pro (PyPI)