Supply Chain Incidents

MAL-2026-310

Malicious code in sky1oauth2 (npm)

MAL-2026-286

Malicious code in forms-new-design (npm)

MAL-2026-276

Malicious code in closure-net (npm)

MAL-2026-278

Malicious code in comstrap (npm)

MAL-2026-292

Malicious code in lusha-integrations-widgets (npm)

MAL-2026-269

Malicious code in auc-2-lib (npm)

MAL-2026-270

Malicious code in base-ui-vue3 (npm)

MAL-2026-282

Malicious code in experian-design-system (npm)

MAL-2026-255

Malicious code in haqawi (PyPI)

MAL-2026-256

Malicious code in legendevil1 (PyPI)

MAL-2026-254

Malicious code in hairest (PyPI)

MAL-2026-258

Malicious code in webmd-page-common (npm)

MAL-2026-253

Malicious code in clipcord (PyPI)

MAL-2026-252

Malicious code in solana-program (PyPI)

MAL-2026-251

Malicious code in soupclaw (PyPI)

MAL-2026-257

Malicious code in silvermine (npm)

MAL-2026-250

Malicious code in transitive-req (PyPI)

MAL-2026-247

Malicious code in ts-tweetnacl (npm)

MAL-2026-246

Malicious code in admin1001 (npm)

MAL-2026-248

Malicious code in dify-api (PyPI)

MAL-2026-249

Malicious code in @flipster/utils (npm)

MAL-2026-245

Malicious code in cnamts-captcha-component (npm)

MAL-2026-244

Malicious code in helium-module (npm)

MAL-2026-243

Malicious code in francium-web-visitors (npm)