Supply Chain Incidents

MAL-2026-1311

Malicious code in iron-menu-behavior (npm)

MAL-2026-1305

Malicious code in collab-library (npm)

MAL-2026-1312

Malicious code in iron-overlay-behavior (npm)

MAL-2026-1307

Malicious code in iron-fit-behavior (npm)

MAL-2026-1302

Malicious code in @platform-growth/guidance-channel-provider (npm)

MAL-2026-1306

Malicious code in falcologgerinternalstate (npm)

MAL-2026-1304

Malicious code in amt-package-united-icons (npm)

MAL-2026-1309

Malicious code in iron-localstorage (npm)

MAL-2026-1313

Malicious code in iron-pages (npm)

MAL-2026-1314

Malicious code in iron-selector (npm)

MAL-2026-1308

Malicious code in iron-image (npm)

MAL-2026-1316

Malicious code in xc-input-toggle (npm)

MAL-2026-1310

Malicious code in iron-media-query (npm)

MAL-2026-1299

Malicious code in monoping (npm)

MAL-2026-1298

Malicious code in jsonify-core (npm)

MAL-2026-1297

Malicious code in json-merge-tool (npm)

MAL-2026-1453

Malicious code in hxq-misc-utils-0379 (PyPI)

MAL-2026-1296

Malicious code in bpsm (PyPI)

MAL-2026-1294

Malicious code in causal-canvas (PyPI)

MAL-2026-1295

Malicious code in tabformerlite (PyPI)

MAL-2026-1293

Malicious code in tw-modern-ui (npm)

MAL-2026-1292

Malicious code in odds-analyzer (npm)

MAL-2026-1291

Malicious code in requests-lite (PyPI)

MAL-2026-1290

Malicious code in remjsonparse (PyPI)