Supply Chain Incidents

MAL-2026-4841

Malicious code in @hcs-hybrid/uirouter-core (npm)

MAL-2026-4845

Malicious code in @polka-ui/recoc (npm)

MAL-2026-4838

Malicious code in justsaying-docs (npm)

MAL-2026-4837

Malicious code in my-test-package-2025-xyz (PyPI)

MAL-2026-4836

Malicious code in nemo-reporter (npm)

MAL-2026-4958

Malicious code in @cloudplatform-single-spa/paas-redis (npm)

MAL-2026-4961

Malicious code in @cloudplatform-single-spa/profile (npm)

MAL-2026-4911

Malicious code in @cloudplatform-single-spa/dataplatform-spark (npm)

MAL-2026-4984

Malicious code in @cloudplatform-single-spa/svp-interfaces (npm)

MAL-2026-5014

Malicious code in @mlspace/dtransfer-history (npm)

MAL-2026-5005

Malicious code in @debit-ib/mobile-debit-ib-additional-card-form (npm)

MAL-2026-4962

Malicious code in @cloudplatform-single-spa/rabbitmq (npm)

MAL-2026-5026

Malicious code in @mlspace/shared-storage (npm)

MAL-2026-4920

Malicious code in @cloudplatform-single-spa/evocs (npm)

MAL-2026-5021

Malicious code in @mlspace/inference-build (npm)

MAL-2026-4901

Malicious code in @cloudplatform-single-spa/cp-api-gw (npm)

MAL-2026-4913

Malicious code in @cloudplatform-single-spa/disks (npm)

MAL-2026-4870

Malicious code in @car-loans/general-analytics (npm)

MAL-2026-4898

Malicious code in @cloudplatform-single-spa/cnapp-ui (npm)

MAL-2026-4933

Malicious code in @cloudplatform-single-spa/ml-ai-agents-agent (npm)

MAL-2026-4974

Malicious code in @cloudplatform-single-spa/subnets (npm)

MAL-2026-4865

Malicious code in @car-loans/close-flow-module (npm)

MAL-2026-4954

Malicious code in @cloudplatform-single-spa/observability (npm)

MAL-2026-4979

Malicious code in @cloudplatform-single-spa/svp-bare-metal-servers (npm)