Supply Chain Incidents

MAL-2026-13613

Malicious code in big-tss (npm)

MAL-2026-13611

Malicious code in mangomind-agent (npm)

MAL-2026-13612

Malicious code in transform-es2015-unicode-regex (npm)

MAL-2026-13610

Malicious code in f-termx (npm)

MAL-2026-13609

Malicious code in hardhat-set (npm)

MAL-2026-13608

Malicious code in @vertexa/prisma-fetch-engine (npm)

MAL-2026-13605

Malicious code in yakuza0 (npm)

MAL-2026-13520

Malicious code in @aster110/cc2wechat (npm)

MAL-2026-13549

Malicious code in dojo-rn-interview (npm)

MAL-2026-13606

Malicious code in cdktn-provider-azurerm (PyPI)

MAL-2026-13522

Malicious code in base-ui-cli (npm)

MAL-2026-13539

Malicious code in delivery-ci-codeceptjs (npm)

MAL-2026-13574

Malicious code in dolyame-ui-inputautocomplete (npm)

MAL-2026-13547

Malicious code in devplatform-spa-plugin-remote-module (npm)

MAL-2026-13557

Malicious code in dolyame-ui-checkablegroup (npm)

MAL-2026-13577

Malicious code in dolyame-ui-inputdate (npm)

MAL-2026-13542

Malicious code in delivery-ci-jira (npm)

MAL-2026-13552

Malicious code in dolyame-boxy-independent-bnpl-main-title (npm)

MAL-2026-13596

Malicious code in dolyame-ui-progressline (npm)

MAL-2026-13583

Malicious code in dolyame-ui-inputsearchtagged (npm)

MAL-2026-13566

Malicious code in dolyame-ui-deprecatepropshoc (npm)

MAL-2026-13576

Malicious code in dolyame-ui-inputcount (npm)

MAL-2026-13565

Malicious code in dolyame-ui-datatable (npm)

MAL-2026-13526

Malicious code in bigops-shared-product-design (npm)