Supply Chain Incidents

MAL-2026-1542

Malicious code in bugbounty-test-123 (npm)

MAL-2026-1539

Malicious code in relay-optimizer-plugin (npm)

MAL-2026-1541

Malicious code in urql-introspection (npm)

MAL-2026-1540

Malicious code in typescript-type-graphql (npm)

MAL-2026-1537

Malicious code in typescript-rtk-query (npm)

MAL-2026-1536

Malicious code in typescript-resolvers (npm)

MAL-2026-1518

Malicious code in ignore-html-and-css-imports (npm)

MAL-2026-1535

Malicious code in transform-dev-warning (npm)

MAL-2026-1534

Malicious code in transform-dev (npm)

MAL-2026-1516

Malicious code in es6-recommended (npm)

MAL-2026-1522

Malicious code in minify-mangle-names (npm)

MAL-2026-1515

Malicious code in developit (npm)

MAL-2026-1531

Malicious code in syntax-decorators (npm)

MAL-2026-1532

Malicious code in syntax-exponentiation-operator (npm)

MAL-2026-1526

Malicious code in prefer-let (npm)

MAL-2026-1520

Malicious code in jam3 (npm)

MAL-2026-1514

Malicious code in declaration-block-no-ignored-properties (npm)

MAL-2026-1525

Malicious code in peer-deps-external (npm)

MAL-2026-1529

Malicious code in require-in-package (npm)

MAL-2026-1519

Malicious code in import-newlines (npm)

MAL-2026-1528

Malicious code in react-you-might-not-need-an-effect (npm)

MAL-2026-1517

Malicious code in filenames-simple (npm)

MAL-2026-1527

Malicious code in proposal-typescript (npm)

MAL-2026-1523

Malicious code in monorepo-cop (npm)