Supply Chain Incidents

MAL-2026-2343

Malicious code in chain-multer (npm)

MAL-2026-2342

Malicious code in chai-set (npm)

MAL-2026-2341

Malicious code in chai-chain-cognivault (npm)

MAL-2026-2340

Malicious code in chai-chain-argon (npm)

MAL-2026-2339

Malicious code in chai-as-chains (npm)

MAL-2026-2338

Malicious code in chai-as-attached (npm)

MAL-2026-2337

Malicious code in chai-as-aligned (npm)

MAL-2026-2336

Malicious code in cdnjavacss (npm)

MAL-2026-2335

Malicious code in azurestack-common (npm)

MAL-2026-2334

Malicious code in argon-node (npm)

MAL-2026-2333

Malicious code in @pansycareful/github-helper (npm)

MAL-2026-2332

Malicious code in @hsbc-mfe/host (npm)

MAL-2026-2331

Malicious code in @girirajravichandran/corp-build-utils-poc (npm)

MAL-2026-2330

Malicious code in @fyxer-ai/shared (npm)

MAL-2026-2329

Malicious code in @abi-labs-frontend/standards (npm)

MAL-2026-2402

Malicious code in plugin-gem-example (RubyGems)

MAL-2026-2401

Malicious code in rocketpill (PyPI)

MAL-2026-2399

Malicious code in flycalc (PyPI)

MAL-2026-2201

Malicious code in privaton-beacon-img-8f3603448690bdde-png (PyPI)

MAL-2026-2137

Malicious code in @one-site/europcar (npm)

MAL-2026-2129

Malicious code in express-session-validator (npm)

MAL-2026-2128

Malicious code in express-session-vailidator (npm)

MAL-2026-2132

Malicious code in sbx-mask (npm)

MAL-2026-2126

Malicious code in agoda-dep-confusion (npm)