Supply Chain Incidents

MAL-2026-2126

Malicious code in agoda-dep-confusion (npm)

MAL-2026-2127

Malicious code in agoda-test-poc (npm)

MAL-2026-2136

Malicious code in yelp-react-component-rating (npm)

MAL-2026-2135

Malicious code in yelp-react-component-photo-upload (npm)

MAL-2026-2134

Malicious code in yelp-biz-action-constants-js-generated (npm)

MAL-2026-2131

Malicious code in nemo-fpti (npm)

MAL-2026-2133

Malicious code in server-fpti (npm)

MAL-2026-2144

Malicious code in litellm (PyPI)

MAL-2026-2125

Malicious code in customerdigital-ui-components-lib (npm)

MAL-2026-2412

Malicious code in @wame/ngx-frf-utilities (npm)

MAL-2026-2411

Malicious code in @wame/ngx-adfs (npm)

MAL-2026-2418

Malicious code in tombac-chronos (npm)

MAL-2026-2410

Malicious code in @the-coca-cola-company/ngps-global-common-utils (npm)

MAL-2026-2409

Malicious code in @phonos/types (npm)

MAL-2026-2417

Malicious code in oc-navbar-module-client (npm)

MAL-2026-2416

Malicious code in oc-ccp-module-client (npm)

MAL-2026-2415

Malicious code in oc-aa-module-client (npm)

MAL-2026-2414

Malicious code in ftapi-core (npm)

MAL-2026-2223

Malicious code in cr-static-shared-components (npm)

MAL-2026-2408

Malicious code in @cloudsop/hmoment (npm)

MAL-2026-2407

Malicious code in @ceeferenderer/itg-renderer-sdk (npm)

MAL-2026-2406

Malicious code in @ceeferenderer/fe-renderer-sdk (npm)

MAL-2026-2413

Malicious code in cclr-component-resources (npm)

MAL-2026-2124

Malicious code in mgrcfg (PyPI)