Supply Chain Incidents

MAL-2026-3344

Malicious code in @bold-commerce/stacks-ui (npm)

MAL-2026-3343

Malicious code in @atlan/connectors (npm)

MAL-2026-3341

Malicious code in runtime-probe (PyPI)

MAL-2026-3342

Malicious code in runtime-readout (PyPI)

MAL-2026-3340

Malicious code in trevlo (npm)

MAL-2026-3339

Malicious code in nf-ui-components (npm)

MAL-2026-3334

Malicious code in fanduel (npm)

MAL-2026-3333

Malicious code in rogiant-quick-install (PyPI)

MAL-2026-3332

Malicious code in rogiant (PyPI)

MAL-2026-3331

Malicious code in lazyhtml-scripts (npm)

MAL-2026-3338

Malicious code in ms.analytics-web (npm)

MAL-2026-3329

Malicious code in api-typings (npm)

MAL-2026-3330

Malicious code in seek-pass (npm)

MAL-2026-3328

Malicious code in pocpoc2626 (npm)

MAL-2026-3327

Malicious code in capacitor-plugin-service-worker (npm)

MAL-2026-3336

Malicious code in @channel_bot/xa0 (npm)

MAL-2026-3326

Malicious code in paychex-common-vendor-lib (npm)

MAL-2026-3325

Malicious code in cloudauth-sdk (PyPI)

MAL-2026-3324

Malicious code in randomchoicemas (PyPI)

MAL-2026-3337

Malicious code in @t-in-one/save_application_hid_to_storage (npm)

MAL-2026-3335

Malicious code in @bank-widgets/whats-new (npm)

MAL-2026-3318

Malicious code in @b2b_blocker/hide_activation_error (npm)

MAL-2026-3320

Malicious code in @google-pay-trust/start (npm)

MAL-2026-3317

Malicious code in @apple-pay-trust/destroy (npm)