Supply Chain Incidents

MAL-2026-2580

Malicious code in @cash-web/no-hardcoded-font-styles (npm)

MAL-2026-2584

Malicious code in @hpcc/js-api (npm)

MAL-2026-2602

Malicious code in etsy-advocacy (npm)

MAL-2026-2607

Malicious code in stats-api-js-client (npm)

MAL-2026-2604

Malicious code in ih-icon (npm)

MAL-2026-2598

Malicious code in babel-plugin-fbtee (npm)

MAL-2026-2599

Malicious code in ccn-common-react-library (npm)

MAL-2026-2610

Malicious code in twilio-video.js (npm)

MAL-2026-2609

Malicious code in trade-in-lib (npm)

MAL-2026-2600

Malicious code in cms-site-api-js-client (npm)

MAL-2026-2601

Malicious code in dwaiter-company-web (npm)

MAL-2026-2608

Malicious code in symphony-core (npm)

MAL-2026-2605

Malicious code in kaltura-ngx-client (npm)

MAL-2026-2603

Malicious code in experian-design-system-themes (npm)

MAL-2026-2606

Malicious code in mdb-react-sortable (npm)

MAL-2026-2576

Malicious code in @b2b-portal/core (npm)

MAL-2026-2577

Malicious code in @b2b-portal/kit (npm)

MAL-2026-2572

Malicious code in hiveos-setting (PyPI)

MAL-2026-2571

Malicious code in hiveos-settings (PyPI)

MAL-2026-2635

Malicious code in pubnub-element (npm)

MAL-2026-2631

Malicious code in babel-plugin-blocks (npm)

MAL-2026-2636

Malicious code in seaport-core-16 (npm)

MAL-2026-2633

Malicious code in markdownlint-rule-link-pattern (npm)

MAL-2026-2915

Malicious code in bitu-staking (npm)