Supply Chain Incidents

MAL-2026-1674

Malicious code in chai-await-cli (npm)

MAL-2026-1673

Malicious code in chai-await-chain (npm)

MAL-2026-1671

Malicious code in chai-as-resolved (npm)

MAL-2026-1672

Malicious code in chai-as-sync (npm)

MAL-2026-1670

Malicious code in chai-as-prop (npm)

MAL-2026-1669

Malicious code in chai-as-prompt (npm)

MAL-2026-1668

Malicious code in chai-as-produced (npm)

MAL-2026-1667

Malicious code in cat-ecommerce-alloy (npm)

MAL-2026-1666

Malicious code in carbon-mac-copy-cloner (npm)

MAL-2026-1665

Malicious code in browser-compat-data (npm)

MAL-2026-1664

Malicious code in brisk-web-ssr (npm)

MAL-2026-1663

Malicious code in braze-content-card-island (npm)

MAL-2026-1662

Malicious code in blob-internal-security-test-f63eabf7 (npm)

MAL-2026-1661

Malicious code in blackstone-core (npm)

MAL-2026-1660

Malicious code in bis-schemas (npm)

MAL-2026-1659

Malicious code in bcp-security-updates (npm)

MAL-2026-1658

Malicious code in bcp-security-update (npm)

MAL-2026-1657

Malicious code in backstage-plugin-wpe-catalog (npm)

MAL-2026-1656

Malicious code in argonnode (npm)

MAL-2026-1655

Malicious code in aligntyper (npm)

MAL-2026-1654

Malicious code in aligntypeer (npm)

MAL-2026-1653

Malicious code in align-configer (npm)

MAL-2026-1652

Malicious code in alfasec (npm)

MAL-2026-1651

Malicious code in ai-fast-auto-trader (npm)