Supply Chain Incidents

MAL-2026-17337

Malicious code in link-age-great (npm)

MAL-2026-17338

Malicious code in link-status-page (npm)

MAL-2026-17336

Malicious code in @redman89405/my-module (npm)

MAL-2026-17332

Malicious code in runhelper (npm)

MAL-2026-17331

Malicious code in iban-validator-js (npm)

MAL-2026-17329

Malicious code in focaleys (npm)

MAL-2026-17328

Malicious code in fca-raihan (npm)

MAL-2026-17327

Malicious code in exiouss (npm)

MAL-2026-17330

Malicious code in imgbundle (npm)

MAL-2026-17322

Malicious code in contoso-login-sim-loader (npm)

MAL-2026-17320

Malicious code in cdn-img-fetch (npm)

MAL-2026-17325

Malicious code in cleanup-string (PyPI)

MAL-2026-17323

Malicious code in cortana-md-engine (npm)

MAL-2026-17321

Malicious code in chaienv (npm)

MAL-2026-17324

Malicious code in dotenv-preflight (npm)

MAL-2026-17316

Malicious code in booking-eligibility (npm)

MAL-2026-17318

Malicious code in developmentstelemetry (npm)

MAL-2026-17317

Malicious code in booking-tasks (npm)

MAL-2026-17319

Malicious code in bfox-build-utils (PyPI)

MAL-2026-17313

Malicious code in pixsvg (npm)

MAL-2026-17312

Malicious code in json-bigint-rs (npm)

MAL-2026-17314

Malicious code in test-supply-npm-lib-4 (npm)

MAL-2026-17311

Malicious code in itsmeeaizat-bailey (npm)

MAL-2026-17305

Malicious code in esm-dotenv (npm)