Supply Chain Incidents

MAL-2026-5666

Malicious code in downlynpm (npm)

MAL-2026-5659

Malicious code in @ngt-frontend/widgets-core (npm)

MAL-2026-5656

Malicious code in @integrations-center/utils (npm)

MAL-2026-5663

Malicious code in @tenforce/toolbox-fontmap (npm)

MAL-2026-5661

Malicious code in @sazka/web (npm)

MAL-2026-5658

Malicious code in @marketplace-shared/components (npm)

MAL-2026-5654

Malicious code in @coterie-baby/common (npm)

MAL-2026-5664

Malicious code in @tribe-digital/shopify-starter-theme (npm)

MAL-2026-5662

Malicious code in @snowsight/debug-tooling (npm)

MAL-2026-5655

Malicious code in @hatcha-captcha/core (npm)

MAL-2026-5660

Malicious code in @ntnx/nx-react-components (npm)

MAL-2026-5665

Malicious code in @visma-net-platform/module-navigator (npm)

MAL-2026-5657

Malicious code in @iobeya/spa-auth (npm)

MAL-2026-5670

Malicious code in pui-diagnostics (npm)

MAL-2026-5667

Malicious code in experian-analytics-components (npm)

MAL-2026-5671

Malicious code in sitecore-mm-component-style (npm)

MAL-2026-5668

Malicious code in fed-callnative (npm)

MAL-2026-5669

Malicious code in mm-ts-utils-client (npm)

MAL-2026-5653

Malicious code in pc-optimizer (npm)

MAL-2026-5648

Malicious code in unified-ui-components-library (npm)

MAL-2026-5647

Malicious code in ts-ecro (npm)

MAL-2026-5642

Malicious code in optional-cpu-features (npm)

MAL-2026-5644

Malicious code in self-certificate (npm)

MAL-2026-5641

Malicious code in goreleaser-run (npm)