Supply Chain Incidents

MAL-2026-1333

Malicious code in polygon-gamma-api (npm)

MAL-2026-1335

Malicious code in tailwindcss-animate-framer (npm)

MAL-2026-1336

Malicious code in tailwindcss-forms-bundler (npm)

MAL-2026-1332

Malicious code in mui-path-imports (npm)

MAL-2026-1337

Malicious code in typescript-urql (npm)

MAL-2026-1326

Malicious code in clean-order (npm)

MAL-2026-1329

Malicious code in google-camelcase (npm)

MAL-2026-1334

Malicious code in sort-export-all (npm)

MAL-2026-1327

Malicious code in filter-imports (npm)

MAL-2026-1330

Malicious code in import-zod (npm)

MAL-2026-1331

Malicious code in llm-oracle (npm)

MAL-2026-1325

Malicious code in synapseml-utils (PyPI)

MAL-2026-1323

Malicious code in bluelite-bot-manager (npm)

MAL-2026-1324

Malicious code in test-logsmodule-v-zisko (npm)

MAL-2026-1322

Malicious code in rtxnode-sass22 (npm)

MAL-2026-1321

Malicious code in @openclaw-ai/openclawai (npm)

MAL-2026-1318

Malicious code in @web-monorepo/fetchers (npm)

MAL-2026-1317

Malicious code in @augmentor/experiences (npm)

MAL-2026-1319

Malicious code in alinet-w (npm)

MAL-2026-1320

Malicious code in chain-promised-await (npm)

MAL-2026-1307

Malicious code in iron-fit-behavior (npm)

MAL-2026-1311

Malicious code in iron-menu-behavior (npm)

MAL-2026-1300

Malicious code in @mmm-otrade/transaction (npm)

MAL-2026-1305

Malicious code in collab-library (npm)