Supply Chain Incidents

MAL-2026-4871

Malicious code in @car-loans/general-feature-toggles (npm)

MAL-2026-4879

Malicious code in @car-loans/save (npm)

MAL-2026-4926

Malicious code in @cloudplatform-single-spa/logaas (npm)

MAL-2026-4970

Malicious code in @cloudplatform-single-spa/smk (npm)

MAL-2026-4944

Malicious code in @cloudplatform-single-spa/ml-inference-comfy-run (npm)

MAL-2026-4985

Malicious code in @cloudplatform-single-spa/svp-lbaas (npm)

MAL-2026-4835

Malicious code in rogiant-install (PyPI)

MAL-2026-4834

Malicious code in @polka-ui/config (npm)

MAL-2026-4833

Malicious code in bulletproof-json (npm)

MAL-2026-4830

Malicious code in editorial-code (npm)

MAL-2026-4832

Malicious code in mse-authentication (npm)

MAL-2026-4831

Malicious code in editorial-mse-authentication-ui (npm)

MAL-2026-4829

Malicious code in quatres (PyPI)

MAL-2026-4828

Malicious code in hmacsync (PyPI)

MAL-2026-4827

Malicious code in unleash-js (npm)

MAL-2026-4826

Malicious code in wm-mapper (npm)

MAL-2026-4822

Malicious code in loadtest-browser-lib (npm)

MAL-2026-4823

Malicious code in msc-terminal (npm)

MAL-2026-4824

Malicious code in cdktn-provider-datadog (PyPI)

MAL-2026-4825

Malicious code in cdktn-provider-newrelic (PyPI)

MAL-2026-4815

Malicious code in @slipless/sdk (npm)

MAL-2026-4821

Malicious code in pywingui (PyPI)

MAL-2026-4817

Malicious code in chainix (npm)

MAL-2026-4819

Malicious code in token-me-uk (npm)