Supply Chain Incidents

MAL-2026-340

Malicious code in libsignal-yazxzcode (npm)

MAL-2026-346

Malicious code in zod-js (npm)

MAL-2026-329

Malicious code in @brokenzzz/garfish (npm)

MAL-2026-335

Malicious code in wac-react-relay (npm)

MAL-2026-328

Malicious code in 1231dai (npm)

MAL-2026-334

Malicious code in viem-js (npm)

MAL-2026-332

Malicious code in tailwin (npm)

MAL-2026-331

Malicious code in cyrpto (npm)

MAL-2026-333

Malicious code in tronweb-tool (npm)

MAL-2026-330

Malicious code in @daffadeveloper/signal-node (npm)

MAL-2026-326

Malicious code in urlssser (PyPI)

MAL-2026-325

Malicious code in marshel (PyPI)

MAL-2026-324

Malicious code in typedoc-plugin-fuel-variants (npm)

MAL-2026-323

Malicious code in eslint-plugin-fuel-react (npm)

MAL-2026-327

Malicious code in mapkit-example-vanillajs (npm)

MAL-2026-1036

Malicious code in uitil (PyPI)

MAL-2026-322

Malicious code in admin10001 (npm)

MAL-2026-321

Malicious code in flip-prx (npm)

MAL-2026-313

Malicious code in spire.officejs-fonts (npm)

MAL-2026-296

Malicious code in nyse-web-tools-common (npm)

MAL-2026-301

Malicious code in react-sitecore-library (npm)

MAL-2026-264

Malicious code in @ux-foundry/palette (npm)

MAL-2026-312

Malicious code in spire.officejs-externs (npm)

MAL-2026-261

Malicious code in @spx-delivery/react (npm)