Supply Chain Incidents

MAL-2026-1563

Malicious code in transform-es2015-shorthand-properties (npm)

MAL-2026-1562

Malicious code in transform-es2015-parameters (npm)

MAL-2026-1557

Malicious code in add-react-displayname (npm)

MAL-2026-1570

Malicious code in transform-member-expression-literals (npm)

MAL-2026-1573

Malicious code in transform-proto-to-assign (npm)

MAL-2026-1567

Malicious code in transform-function-bind (npm)

MAL-2026-1558

Malicious code in syntax-async-generators (npm)

MAL-2026-1564

Malicious code in transform-es2015-spread (npm)

MAL-2026-1565

Malicious code in transform-export-extensions (npm)

MAL-2026-1561

Malicious code in transform-es2015-duplicate-keys (npm)

MAL-2026-1550

Malicious code in syntax-export-extensions (npm)

MAL-2026-1548

Malicious code in syntax-class-constructor-call (npm)

MAL-2026-1549

Malicious code in syntax-do-expressions (npm)

MAL-2026-1551

Malicious code in syntax-function-bind (npm)

MAL-2026-1546

Malicious code in dazaar-payment (npm)

MAL-2026-1545

Malicious code in dazaar-cli (npm)

MAL-2026-1547

Malicious code in pear-wrk-wdk (npm)

MAL-2026-1556

Malicious code in yoshi-base (npm)

MAL-2026-1552

Malicious code in typescript-nhost (npm)

MAL-2026-1554

Malicious code in typescript-validation-schema (npm)

MAL-2026-1553

Malicious code in typescript-react-query (npm)

MAL-2026-1555

Malicious code in typescript-vue-apollo-smart-ops (npm)

MAL-2026-1544

Malicious code in rowrap (PyPI)

MAL-2026-1543

Malicious code in aniresolve (PyPI)