Supply Chain Incidents

MAL-2026-17165

Malicious code in c2-client (npm)

MAL-2026-17162

Malicious code in simple-date-formatter-new-16 (npm)

MAL-2026-17157

Malicious code in eslint-config-compact-base (npm)

MAL-2026-17160

Malicious code in simple-date-formatter-new-14 (npm)

MAL-2026-17159

Malicious code in simple-date-formatter-new-13 (npm)

MAL-2026-17156

Malicious code in aliftech-ui (npm)

MAL-2026-17155

Malicious code in @osl-design/react (npm)

MAL-2026-17161

Malicious code in simple-date-formatter-new-15 (npm)

MAL-2026-17158

Malicious code in simple-date-formatter-new-11 (npm)

MAL-2026-17154

Malicious code in @nf-addons/am-global-header (npm)

MAL-2026-17153

Malicious code in @birbalo/aliftech-ui (npm)

MAL-2026-16486

Malicious code in @baanx/domain (npm)

MAL-2026-16485

Malicious code in @baanx/common (npm)

MAL-2026-16483

Malicious code in @rixxcodex/baileys (npm)

MAL-2026-16484

Malicious code in pino-testkit (npm)

MAL-2026-16482

Malicious code in internallib_v657 (npm)

MAL-2026-16481

Malicious code in internallib_v463 (npm)

MAL-2026-16480

Malicious code in a-onesite (npm)

MAL-2026-16478

Malicious code in event-hunter (npm)

MAL-2026-16479

Malicious code in simplenewnpmpackage (npm)

MAL-2026-16477

Malicious code in com.apple.unityplugin.storekit (npm)

MAL-2026-16476

Malicious code in @memtensor/memos-cloud-openclaw-plugin (npm)

MAL-2026-16475

Malicious code in memoryos (PyPI)

MAL-2026-16473

Malicious code in sea-baileys (npm)