Supply Chain Incidents

MAL-2026-2330

Malicious code in @fyxer-ai/shared (npm)

MAL-2026-2329

Malicious code in @abi-labs-frontend/standards (npm)

MAL-2026-2402

Malicious code in plugin-gem-example (RubyGems)

MAL-2026-2401

Malicious code in rocketpill (PyPI)

MAL-2026-2399

Malicious code in flycalc (PyPI)

MAL-2026-2201

Malicious code in privaton-beacon-img-8f3603448690bdde-png (PyPI)

MAL-2026-2137

Malicious code in @one-site/europcar (npm)

MAL-2026-2129

Malicious code in express-session-validator (npm)

MAL-2026-2128

Malicious code in express-session-vailidator (npm)

MAL-2026-2132

Malicious code in sbx-mask (npm)

MAL-2026-2126

Malicious code in agoda-dep-confusion (npm)

MAL-2026-2127

Malicious code in agoda-test-poc (npm)

MAL-2026-2136

Malicious code in yelp-react-component-rating (npm)

MAL-2026-2130

Malicious code in fancode-web-app (npm)

MAL-2026-2134

Malicious code in yelp-biz-action-constants-js-generated (npm)

MAL-2026-2135

Malicious code in yelp-react-component-photo-upload (npm)

MAL-2026-2133

Malicious code in server-fpti (npm)

MAL-2026-2131

Malicious code in nemo-fpti (npm)

MAL-2026-2144

Malicious code in litellm (PyPI)

MAL-2026-2125

Malicious code in customerdigital-ui-components-lib (npm)

MAL-2026-2412

Malicious code in @wame/ngx-frf-utilities (npm)

MAL-2026-2411

Malicious code in @wame/ngx-adfs (npm)

MAL-2026-2418

Malicious code in tombac-chronos (npm)

MAL-2026-2410

Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)