Supply Chain Incidents

MAL-2026-332

Malicious code in tailwin (npm)

MAL-2026-333

Malicious code in tronweb-tool (npm)

MAL-2026-330

Malicious code in @daffadeveloper/signal-node (npm)

MAL-2026-326

Malicious code in urlssser (PyPI)

MAL-2026-325

Malicious code in marshel (PyPI)

MAL-2026-324

Malicious code in typedoc-plugin-fuel-variants (npm)

MAL-2026-323

Malicious code in eslint-plugin-fuel-react (npm)

MAL-2026-327

Malicious code in mapkit-example-vanillajs (npm)

MAL-2026-1036

Malicious code in uitil (PyPI)

MAL-2026-322

Malicious code in admin10001 (npm)

MAL-2026-321

Malicious code in flip-prx (npm)

MAL-2026-260

Malicious code in @servicepoint/vue-project (npm)

MAL-2026-306

Malicious code in sd-cip-module-client (npm)

MAL-2026-277

Malicious code in cognito-auth-plugin (npm)

MAL-2026-281

Malicious code in eniram-web-common-ui (npm)

MAL-2026-290

Malicious code in kc-fe-cli (npm)

MAL-2026-293

Malicious code in lusha-micro-app-messages (npm)

MAL-2026-262

Malicious code in @spx-smartsorting/vue (npm)

MAL-2026-279

Malicious code in dibels8-content (npm)

MAL-2026-280

Malicious code in dws-dx (npm)

MAL-2026-304

Malicious code in sd-agent-toolbar-module-client (npm)

MAL-2026-319

Malicious code in vue_frontend_rpc (npm)

MAL-2026-303

Malicious code in sd-active-conversation-module-client (npm)

MAL-2026-263

Malicious code in @spx-workforceops/shared-vue (npm)