Supply Chain Incidents

MAL-2026-6150

Malicious code in barcodescanner-reconnect (npm)

MAL-2026-6179

Malicious code in touchid-images (npm)

MAL-2026-6176

Malicious code in request-tracking-sqlite (npm)

MAL-2026-6168

Malicious code in macos-contentprovider-optimizingassets (npm)

MAL-2026-6174

Malicious code in pushnotifications-gesturerecognition (npm)

MAL-2026-6153

Malicious code in datapersistence-profiling (npm)

MAL-2026-6159

Malicious code in expandingcards-socket-virtualization (npm)

MAL-2026-6151

Malicious code in buildautomation-touch (npm)

MAL-2026-6167

Malicious code in lazyloading-haptics (npm)

MAL-2026-6147

Malicious code in analytics-readability-gestures (npm)

MAL-2026-6166

Malicious code in jest-macos (npm)

MAL-2026-6152

Malicious code in custom-save-area-block (npm)

MAL-2026-6175

Malicious code in request-performance (npm)

MAL-2026-6180

Malicious code in userinterface-machinelearning (npm)

MAL-2026-6181

Malicious code in virtualization-compression-collapse (npm)

MAL-2026-6161

Malicious code in flexbox-oauth-machinelearning (npm)

MAL-2026-6163

Malicious code in framerate-interaction-permissions (npm)

MAL-2026-6173

Malicious code in profiling-keychain (npm)

MAL-2026-6154

Malicious code in datapersistence-steppers-ai (npm)

MAL-2026-6145

Malicious code in accordion-animationtiming-authorization (npm)

MAL-2026-6160

Malicious code in firebase-readability (npm)

MAL-2026-6158

Malicious code in enzyme-optimization-bluetooth (npm)

MAL-2026-6149

Malicious code in backgroundprocessing-contextmenus (npm)

MAL-2026-6148

Malicious code in async-protobuf-av (npm)