Supply Chain Incidents

MAL-2026-234

Malicious code in xml2js-js (npm)

MAL-2026-219

Malicious code in firestore-types (npm)

MAL-2026-215

Malicious code in auth-types (npm)

MAL-2026-217

Malicious code in experimental-utils (npm)

MAL-2026-221

Malicious code in gradle-plugin (npm)

MAL-2026-214

Malicious code in analytics-browser (npm)

MAL-2026-209

Malicious code in @t4i-cms-components/contact-card (npm)

MAL-2026-211

Malicious code in @workleap-widgets/client (npm)

MAL-2026-212

Malicious code in lyonscg (npm)

MAL-2026-208

Malicious code in @gwp-gtmt-components/event-listener (npm)

MAL-2026-210

Malicious code in @workleap-ai/shared (npm)

MAL-2026-203

Malicious code in body-parser-js (npm)

MAL-2026-207

Malicious code in yargs-js (npm)

MAL-2026-204

Malicious code in pako-js (npm)

MAL-2026-206

Malicious code in terser-js (npm)

MAL-2026-205

Malicious code in rxjs-js (npm)

MAL-2026-198

Malicious code in shopee-chat (npm)

MAL-2026-191

Malicious code in libc-dev (PyPI)

MAL-2026-190

Malicious code in conmiyagi-map (npm)

MAL-2026-189

Malicious code in oncecall (PyPI)

MAL-2026-194

Malicious code in mui7 (npm)

MAL-2026-196

Malicious code in oe-oauth (npm)

MAL-2026-202

Malicious code in wac-relay-runtime (npm)

MAL-2026-195

Malicious code in mui7icons (npm)