Supply Chain Incidents

MAL-2026-6664

Malicious code in hrb-cas-auth-js (npm)

MAL-2026-6669

Malicious code in pvd3 (npm)

MAL-2026-6621

Malicious code in @flipbit2-bb/scope-test (npm)

MAL-2026-6661

Malicious code in clx-cookieparser (npm)

MAL-2026-6658

Malicious code in bundrix (npm)

MAL-2026-6657

Malicious code in authsessionbridge (npm)

MAL-2026-6655

Malicious code in auth-state-service (npm)

MAL-2026-6656

Malicious code in authmatrix (npm)

MAL-2026-6594

Malicious code in vkzmn (npm)

MAL-2026-6593

Malicious code in django-bkvision (PyPI)

MAL-2026-6592

Malicious code in maplibre-gl-vue3 (npm)

MAL-2026-6588

Malicious code in endpointmap (npm)

MAL-2026-6589

Malicious code in envfile-sync (npm)

MAL-2026-6590

Malicious code in envfile-sync-cli (npm)

MAL-2026-6587

Malicious code in clob-client-math (npm)

MAL-2026-6591

Malicious code in ledgerflow-deploy-utils (npm)

MAL-2026-6580

Malicious code in loadutils (npm)

MAL-2026-6578

Malicious code in layerd-unit-codec-parser (npm)

MAL-2026-6583

Malicious code in pino-debugging (npm)

MAL-2026-6582

Malicious code in openai-agents-helpers (npm)

MAL-2026-6584

Malicious code in poly-kelly (npm)

MAL-2026-6576

Malicious code in checkmarx-claude-cache (npm)

MAL-2026-6581

Malicious code in ollama-helpers (npm)

MAL-2026-6577

Malicious code in int_sezzle_sfra (npm)