Supply Chain Incidents

MAL-2026-5042

Malicious code in @t-in-one/prefill_credit_data_token (npm)

MAL-2026-5040

Malicious code in @t-in-one/only_difference_payload (npm)

MAL-2026-5031

Malicious code in @capibar.chat/ui-kit (npm)

MAL-2026-5045

Malicious code in @t-in-one/safe_local_storage_token (npm)

MAL-2026-5038

Malicious code in @t-in-one/form_product_token (npm)

MAL-2026-5039

Malicious code in @t-in-one/get_application_hid (npm)

MAL-2026-4861

Malicious code in lib-1779997093-yjeeqn (PyPI)

MAL-2026-4862

Malicious code in veloxml-cli (PyPI)

MAL-2026-4860

Malicious code in @qlab/ui (npm)

MAL-2026-4859

Malicious code in telethon-pro-safe (PyPI)

MAL-2026-5027

Malicious code in @neon-i18n/core-ui (npm)

MAL-2026-4839

Malicious code in hellowornd (npm)

MAL-2026-4856

Malicious code in @service-suppliers/set_suppliers_loading_stop (npm)

MAL-2026-4854

Malicious code in @service-suppliers/set_suppliers_data (npm)

MAL-2026-4858

Malicious code in @service-user-notifications/set_refresh_interval (npm)

MAL-2026-4853

Malicious code in @service-suppliers/set_selected_supplier_action_saga (npm)

MAL-2026-4857

Malicious code in @service-user-notifications/reset_notifications_not_removable (npm)

MAL-2026-4852

Malicious code in @service-suppliers/set_initial_loaded (npm)

MAL-2026-4851

Malicious code in @service-suppliers/set_country_list (npm)

MAL-2026-4855

Malicious code in @service-suppliers/set_suppliers_loading_start (npm)

MAL-2026-4850

Malicious code in @service-suppliers/reset_country_list (npm)

MAL-2026-4844

Malicious code in @polka-ui/reco (npm)

MAL-2026-4846

Malicious code in @service-suppliers/fetch-initial-suppliers-watcher-saga (npm)

MAL-2026-4842

Malicious code in @polka-ui/configuration (npm)