Supply Chain Incidents

MAL-2026-20

Malicious code in kid-api (npm)

MAL-2026-9

Malicious code in 511fola (npm)

MAL-2026-24

Malicious code in tickncook-robot (npm)

MAL-2026-15

Malicious code in eslint-config-skynet (npm)

MAL-2026-13

Malicious code in ent-file-upload-widget-v2 (npm)

MAL-2026-12

Malicious code in datatables-editor (npm)

MAL-2026-21

Malicious code in orchestration-node-common-errors (npm)

MAL-2026-17

Malicious code in identity-emitter (npm)

MAL-2026-16

Malicious code in fix-cc-raiesy (npm)

MAL-2026-14

Malicious code in ent-profile-unauth-msr-stop (npm)

MAL-2026-19

Malicious code in jest-config-ibm-cloud-cognitive (npm)

MAL-2026-22

Malicious code in pkg1bate5apg1 (npm)

MAL-2026-25

Malicious code in usaa-authentication-mocks (npm)

MAL-2026-23

Malicious code in showdownxss (npm)

MAL-2026-10

Malicious code in babel-preset-ibm-cloud-cognitive (npm)

MAL-2026-8

Malicious code in @nitaiapiiro/rand_emoji (npm)

MAL-2026-26

Malicious code in pdatainstaller (PyPI)

MAL-2026-7

Malicious code in gatr (PyPI)

MAL-2026-6

Malicious code in ziphash (PyPI)

MAL-2026-5

Malicious code in queryservice-client (PyPI)

MAL-2026-4

Malicious code in rules-playground (npm)

MAL-2026-3

Malicious code in rules-deployer (npm)

MAL-2026-2

Malicious code in common-cli-utils (npm)

MAL-2026-1

Malicious code in sfnt2woff-zopfli (PyPI)