Supply Chain Incidents

MAL-2026-2068

Malicious code in eslint-config-ppf (npm)

MAL-2026-2049

Malicious code in @emilgroup/gdv-sdk-node (npm)

MAL-2026-2072

Malicious code in react-leaflet-heatmap-layer (npm)

MAL-2026-2071

Malicious code in react-leaflet-cluster-layer (npm)

MAL-2026-2065

Malicious code in @opengov/ppf-eslint-config (npm)

MAL-2026-2036

Malicious code in @emilgroup/auth-sdk (npm)

MAL-2026-2033

Malicious code in @emilgroup/accounting-sdk (npm)

MAL-2026-2031

Malicious code in @emilgroup/account-sdk (npm)

MAL-2026-2067

Malicious code in babel-plugin-react-pure-component (npm)

MAL-2026-2030

Malicious code in @pypestream/floating-ui-dom (npm)

MAL-2026-2028

Malicious code in pipinpeace-bind (PyPI)

MAL-2026-2029

Malicious code in pipinpeace-reverse (PyPI)

MAL-2026-2027

Malicious code in opengov-k6-core (npm)

MAL-2026-2026

Malicious code in pipinpeace-env (PyPI)

MAL-2026-2025

Malicious code in remitly-blog (npm)

MAL-2026-2024

Malicious code in @mesh-helpers/themehelper (npm)

MAL-2026-2022

Malicious code in @mesh-components/card (npm)

MAL-2026-2023

Malicious code in @mesh-components/customthemeprovider (npm)

MAL-2026-2021

Malicious code in @mesh-helpers/common (npm)

MAL-2026-2018

Malicious code in @modals/blockchain (npm)

MAL-2026-2019

Malicious code in @modals/layout (npm)

MAL-2026-2020

Malicious code in aiolrucache (PyPI)

MAL-2026-2017

Malicious code in thisismytest (PyPI)

MAL-2026-2016

Malicious code in qyrm-pipinject4 (PyPI)