Supply Chain Incidents

MAL-2026-353

Malicious code in advanced-svg-fetcher (npm)

MAL-2026-354

Malicious code in dux-portal (npm)

MAL-2026-355

Malicious code in dux-portal-privacy (npm)

MAL-2026-356

Malicious code in react-server-dom-unbundled (npm)

MAL-2026-352

Malicious code in medifile (PyPI)

MAL-2026-351

Malicious code in nanoinstaller (PyPI)

MAL-2026-350

Malicious code in bnanainstaller (PyPI)

MAL-2026-349

Malicious code in tutor_table (npm)

MAL-2026-348

Malicious code in react-native-webview-forked (npm)

MAL-2026-347

Malicious code in @bingads-webui-theme-2018/theme-fluent (npm)

MAL-2026-339

Malicious code in internallib_v355 (npm)

MAL-2026-345

Malicious code in private-payment-lib (npm)

MAL-2026-343

Malicious code in ofjaaah-internal-utils (npm)

MAL-2026-344

Malicious code in ofjaaah-security-lib (npm)

MAL-2026-341

Malicious code in ofjaaah-auth-module (npm)

MAL-2026-342

Malicious code in ofjaaah-build-tools (npm)

MAL-2026-338

Malicious code in internal-company-sdk (npm)

MAL-2026-336

Malicious code in @cda-apps/source (npm)

MAL-2026-337

Malicious code in chai-as-executed (npm)

MAL-2026-340

Malicious code in libsignal-yazxzcode (npm)

MAL-2026-346

Malicious code in zod-js (npm)

MAL-2026-335

Malicious code in wac-react-relay (npm)

MAL-2026-329

Malicious code in @brokenzzz/garfish (npm)

MAL-2026-328

Malicious code in 1231dai (npm)