Supply Chain Incidents

MAL-2026-3269

Malicious code in @bcs-react-ui/context-menu (npm)

MAL-2026-3263

Malicious code in @bcs-adapters/core-adapter (npm)

MAL-2026-3264

Malicious code in @bcs-adapters/keycloak-api-adapter (npm)

MAL-2026-3323

Malicious code in paypal-payouts-bridge (npm)

MAL-2026-3322

Malicious code in microsoft-agents-auth-service (npm)

MAL-2026-3253

Malicious code in feature-flag-service (npm)

MAL-2026-3252

Malicious code in gauth-client (PyPI)

MAL-2026-3251

Malicious code in puan31 (PyPI)

MAL-2026-3250

Malicious code in rostilesolver (PyPI)

MAL-2026-3309

Malicious code in google-cloud-secret-manager-config-poc (npm)

MAL-2026-3249

Malicious code in internal-company-module-test-1337 (npm)

MAL-2026-3248

Malicious code in pwn-control (PyPI)

MAL-2026-3247

Malicious code in metoopro (PyPI)

MAL-2026-3297

Malicious code in ally-call-wait-time (npm)

MAL-2026-3289

Malicious code in @allybank/ally-sdk (npm)

MAL-2026-3294

Malicious code in ally-allowlist (npm)

MAL-2026-3291

Malicious code in @athena-portal/themes (npm)

MAL-2026-3299

Malicious code in ally-eagw-identity (npm)

MAL-2026-3295

Malicious code in ally-antivirus (npm)

MAL-2026-3292

Malicious code in @breeze-ai/ui-library (npm)

MAL-2026-3293

Malicious code in @breezeai-frontend/i18n-config (npm)

MAL-2026-3304

Malicious code in apcyber-test-package (npm)

MAL-2026-3246

Malicious code in win-update-helper-tool-v2 (PyPI)

MAL-2026-3245

Malicious code in system-update-tool (PyPI)