Supply Chain Incidents

MAL-2026-528

Malicious code in @shije/new-qs (npm)

MAL-2026-520

Malicious code in ftm-noderpc (npm)

MAL-2026-521

Malicious code in hammer-jquery (npm)

MAL-2026-523

Malicious code in mapkit-example-svelte (npm)

MAL-2026-522

Malicious code in magento-coding-standard-eslint-plugin (npm)

MAL-2026-525

Malicious code in sandbox-hooks (npm)

MAL-2026-524

Malicious code in mapkit-example-vue (npm)

MAL-2026-519

Malicious code in @afg-ikea/ikea-modals (npm)

MAL-2026-518

Malicious code in @afg-ikea/ikea-kiosk-related-components (npm)

MAL-2026-517

Malicious code in @afg-ikea/ikea-family-registration-module (npm)

MAL-2026-510

Malicious code in radishwxm5 (PyPI)

MAL-2026-509

Malicious code in @sommos/create-program-template-form-data (npm)

MAL-2026-508

Malicious code in cartos-dds-ui (npm)

MAL-2026-553

Malicious code in @snazah/davey (npm)

MAL-2026-507

Malicious code in tripica-library (npm)

MAL-2026-554

Malicious code in braintree-web-latest (npm)

MAL-2026-506

Malicious code in selenium-integration (PyPI)

MAL-2026-512

Malicious code in overstock-component-library (npm)

MAL-2026-516

Malicious code in overstock-login-layer (npm)

MAL-2026-511

Malicious code in ostk-otel-autoconfig (npm)

MAL-2026-513

Malicious code in overstock-component-library-v3 (npm)

MAL-2026-505

Malicious code in flask-hookserver (PyPI)

MAL-2026-504

Malicious code in researchpoc (PyPI)

MAL-2026-501

Malicious code in system-integration-toxi (PyPI)