Supply Chain Incidents

MAL-2026-10734

Malicious code in infrastructure-common (npm)

MAL-2026-10740

Malicious code in myreviews-core (npm)

MAL-2026-10739

Malicious code in mw-server-util (npm)

MAL-2026-10731

Malicious code in date-utils-light (npm)

MAL-2026-10733

Malicious code in idlive-document-capture-web (npm)

MAL-2026-10710

Malicious code in @equans-services/codex (npm)

MAL-2026-10737

Malicious code in mmagrt (npm)

MAL-2026-10752

Malicious code in xxdxa (npm)

MAL-2026-10738

Malicious code in mui-option (npm)

MAL-2026-10749

Malicious code in sync-grove (npm)

MAL-2026-10712

Malicious code in @hibachi-xyz/common (npm)

MAL-2026-10735

Malicious code in isite (npm)

MAL-2026-10713

Malicious code in @hibachi-xyz/config (npm)

MAL-2026-10716

Malicious code in @hibachi-xyz/ui (npm)

MAL-2026-10714

Malicious code in @hibachi-xyz/sdk (npm)

MAL-2026-10704

Malicious code in @across-toolkit/typescript-config (npm)

MAL-2026-10715

Malicious code in @hibachi-xyz/types (npm)

MAL-2026-10711

Malicious code in @funny-booth/agent-core (npm)

MAL-2026-10742

Malicious code in node-as-api (npm)

MAL-2026-10748

Malicious code in string-formatter-pro (npm)

MAL-2026-10703

Malicious code in @across-toolkit/eslint-config (npm)

MAL-2026-10702

Malicious code in discordia-telemetria (PyPI)

MAL-2026-10700

Malicious code in time-format-kit (npm)

MAL-2026-10701

Malicious code in discord-telemetry (PyPI)