Supply Chain Incidents

MAL-2026-1553

Malicious code in typescript-react-query (npm)

MAL-2026-1555

Malicious code in typescript-vue-apollo-smart-ops (npm)

MAL-2026-1544

Malicious code in rowrap (PyPI)

MAL-2026-1543

Malicious code in aniresolve (PyPI)

MAL-2026-1542

Malicious code in bugbounty-test-123 (npm)

MAL-2026-1539

Malicious code in relay-optimizer-plugin (npm)

MAL-2026-1541

Malicious code in urql-introspection (npm)

MAL-2026-1540

Malicious code in typescript-type-graphql (npm)

MAL-2026-1537

Malicious code in typescript-rtk-query (npm)

MAL-2026-1536

Malicious code in typescript-resolvers (npm)

MAL-2026-1518

Malicious code in ignore-html-and-css-imports (npm)

MAL-2026-1535

Malicious code in transform-dev-warning (npm)

MAL-2026-1534

Malicious code in transform-dev (npm)

MAL-2026-1516

Malicious code in es6-recommended (npm)

MAL-2026-1522

Malicious code in minify-mangle-names (npm)

MAL-2026-1515

Malicious code in developit (npm)

MAL-2026-1531

Malicious code in syntax-decorators (npm)

MAL-2026-1532

Malicious code in syntax-exponentiation-operator (npm)

MAL-2026-1526

Malicious code in prefer-let (npm)

MAL-2026-1520

Malicious code in jam3 (npm)

MAL-2026-1514

Malicious code in declaration-block-no-ignored-properties (npm)

MAL-2026-1525

Malicious code in peer-deps-external (npm)

MAL-2026-1529

Malicious code in require-in-package (npm)

MAL-2026-1519

Malicious code in import-newlines (npm)