Supply Chain Incidents

MAL-2026-173

Malicious code in cng-web-lib (npm)

MAL-2026-181

Malicious code in smintio-portals-component-sdk (npm)

MAL-2026-176

Malicious code in mixpanel-lib (npm)

MAL-2026-168

Malicious code in @zuora-marketing/linting (npm)

MAL-2026-167

Malicious code in icon-service (npm)

MAL-2026-165

Malicious code in @kyriba/mf-kit (npm)

MAL-2026-166

Malicious code in @kyriba/ui-workspace (npm)

MAL-2026-164

Malicious code in @kyriba/data-frontend (npm)

MAL-2026-163

Malicious code in do-not-install-this-package-002 (PyPI)

MAL-2026-162

Malicious code in btcli-security (PyPI)

MAL-2026-159

Malicious code in chai-min (npm)

MAL-2026-160

Malicious code in json-mappings (npm)

MAL-2026-161

Malicious code in jsonify-setting (npm)

MAL-2026-155

Malicious code in shaktihacker2026 (npm)

MAL-2026-154

Malicious code in ncodeauth (npm)

MAL-2026-157

Malicious code in test-thegenetic-module (npm)

MAL-2026-153

Malicious code in darknet-dispatches-internal (npm)

MAL-2026-158

Malicious code in timeout-ts (npm)

MAL-2026-156

Malicious code in sparkling-cli (npm)

MAL-2026-151

Malicious code in svelte-monorepo (npm)

MAL-2026-150

Malicious code in hoppscotch-agent (npm)

MAL-2026-149

Malicious code in bnia-work (npm)

MAL-2026-152

Malicious code in week-4-node-modularization (npm)

MAL-2026-192

Malicious code in @testfeii/hallo-word (npm)