Supply Chain Incidents

MAL-2026-365

Malicious code in telia-eventapi-client (npm)

MAL-2026-366

Malicious code in testing-package-bose (npm)

MAL-2026-357

Malicious code in chai-bin (npm)

MAL-2026-362

Malicious code in health-check-node (npm)

MAL-2026-358

Malicious code in dot-env-buffer (npm)

MAL-2026-353

Malicious code in advanced-svg-fetcher (npm)

MAL-2026-354

Malicious code in dux-portal (npm)

MAL-2026-355

Malicious code in dux-portal-privacy (npm)

MAL-2026-356

Malicious code in react-server-dom-unbundled (npm)

MAL-2026-352

Malicious code in medifile (PyPI)

MAL-2026-351

Malicious code in nanoinstaller (PyPI)

MAL-2026-350

Malicious code in bnanainstaller (PyPI)

MAL-2026-349

Malicious code in tutor_table (npm)

MAL-2026-348

Malicious code in react-native-webview-forked (npm)

MAL-2026-347

Malicious code in @bingads-webui-theme-2018/theme-fluent (npm)

MAL-2026-339

Malicious code in internallib_v355 (npm)

MAL-2026-342

Malicious code in ofjaaah-build-tools (npm)

MAL-2026-338

Malicious code in internal-company-sdk (npm)

MAL-2026-343

Malicious code in ofjaaah-internal-utils (npm)

MAL-2026-345

Malicious code in private-payment-lib (npm)

MAL-2026-341

Malicious code in ofjaaah-auth-module (npm)

MAL-2026-344

Malicious code in ofjaaah-security-lib (npm)

MAL-2026-336

Malicious code in @cda-apps/source (npm)

MAL-2026-337

Malicious code in chai-as-executed (npm)