Supply Chain Incidents

MAL-2026-11070

Malicious code in whs4_deu (npm)

MAL-2026-11072

Malicious code in wsh4_edu (npm)

MAL-2026-11071

Malicious code in whs4_eud (npm)

MAL-2026-11064

Malicious code in page-navigation (npm)

MAL-2026-11061

Malicious code in identityscimapiserv (npm)

MAL-2026-11063

Malicious code in xo-member-components (npm)

MAL-2026-11060

Malicious code in f0-form-manipulator (npm)

MAL-2026-11062

Malicious code in preferenceslifecycle-paypal (npm)

MAL-2026-11057

Malicious code in merchantprefsservice-paypal (npm)

MAL-2026-11056

Malicious code in gpaas-paypal (npm)

MAL-2026-11059

Malicious code in pp-react-ui5 (npm)

MAL-2026-11058

Malicious code in payoutsvettingserv-paypal (npm)

MAL-2026-11055

Malicious code in fundraiserservicepp (npm)

MAL-2026-11051

Malicious code in trongridy (PyPI)

MAL-2026-11069

Malicious code in clerk-next-fix-auth-protection (npm)

MAL-2026-11050

Malicious code in discordnv (PyPI)

MAL-2026-11053

Malicious code in app-data-lts (npm)

MAL-2026-11052

Malicious code in app-data-layer (npm)

MAL-2026-11054

Malicious code in app-node-layer (npm)

MAL-2026-11049

Malicious code in mrmustard (PyPI)

MAL-2026-11046

Malicious code in intel-cicd-repo-infrastructure (PyPI)

MAL-2026-11048

Malicious code in karpatkit (PyPI)

MAL-2026-11047

Malicious code in karpatkey (PyPI)

MAL-2026-11045

Malicious code in subapp-pkg-util (npm)