Supply Chain Incidents

MAL-2026-13437

Malicious code in aitable-workflow-server (npm)

MAL-2026-13448

Malicious code in lib-frontsga (npm)

MAL-2026-13453

Malicious code in pilgrimage-portal-client (npm)

MAL-2026-13467

Malicious code in wos-library-ui (npm)

MAL-2026-13436

Malicious code in @wbnr/frontend-shared (npm)

MAL-2026-13439

Malicious code in commonweb-balance (npm)

MAL-2026-13441

Malicious code in consumerweb-creditcollection (npm)

MAL-2026-13440

Malicious code in connect-contingency (npm)

MAL-2026-13442

Malicious code in content-common (npm)

MAL-2026-13438

Malicious code in cewe-npm-cops (npm)

MAL-2026-13449

Malicious code in merchantweb-lang-cookie-reset (npm)

MAL-2026-13472

Malicious code in alphalend-abi (PyPI)

MAL-2026-13430

Malicious code in @ch4acko3/frontal-lobe (npm)

MAL-2026-13429

Malicious code in @avi892nash/aegis-grid-runner (npm)

MAL-2026-13473

Malicious code in alphalend-layouts (PyPI)

MAL-2026-13460

Malicious code in stretchshop (npm)

MAL-2026-13459

Malicious code in streak-map-cache (npm)

MAL-2026-13428

Malicious code in @love-moon/conductor-cli (npm)

MAL-2026-13443

Malicious code in diezyyasha-baileys (npm)

MAL-2026-13474

Malicious code in @diezyyasha/libsignal-node (npm)

MAL-2026-13427

Malicious code in @leejungkiin/awkit (npm)

MAL-2026-13419

Malicious code in @holocronlab/botruntime-runtime (npm)

MAL-2026-13420

Malicious code in @innocarpe/deepseek-build (npm)

MAL-2026-13423

Malicious code in fetchrtds (npm)