Supply Chain Incidents

MAL-2026-1650

Malicious code in advertising-shared (npm)

MAL-2026-1649

Malicious code in advertising-podlet (npm)

MAL-2026-1648

Malicious code in advertising-events (npm)

MAL-2026-1647

Malicious code in adobe-tracking (npm)

MAL-2026-1646

Malicious code in abstract-http-request (npm)

MAL-2026-1645

Malicious code in aboba-initial (npm)

MAL-2026-1644

Malicious code in aboba-docker-check (npm)

MAL-2026-1643

Malicious code in @vampirchik147/libxmljs2 (npm)

MAL-2026-1642

Malicious code in @upstashed/context7-mcp (npm)

MAL-2026-1641

Malicious code in @uc-platform/user-service-client-ts (npm)

MAL-2026-1640

Malicious code in @uc-platform/auth (npm)

MAL-2026-1639

Malicious code in @uc-platform/advertisement-service-client (npm)

MAL-2026-1638

Malicious code in @tl-icons/core (npm)

MAL-2026-1637

Malicious code in @spot-dapp/web (npm)

MAL-2026-1636

Malicious code in @sommos/create-leaverule-or-terminationrule-form-data (npm)

MAL-2026-1635

Malicious code in @polymarket-developers/clob-client (npm)

MAL-2026-1634

Malicious code in @panopto/api-core (npm)

MAL-2026-1633

Malicious code in @nxt-costco-com/forge-icons (npm)

MAL-2026-1632

Malicious code in @nxt-costco-com/forge-design-tokens (npm)

MAL-2026-1631

Malicious code in @nxt-costco-com/forge-components (npm)

MAL-2026-1630

Malicious code in @measures/responsive (npm)

MAL-2026-1629

Malicious code in @legacy-utils/core (npm)

MAL-2026-1628

Malicious code in @legacy-ui/core (npm)

MAL-2026-1627

Malicious code in @legacy-components/core (npm)