Supply Chain Incidents

MAL-2026-4301

Malicious code in auth0-android-helper-utils (npm)

MAL-2026-4305

Malicious code in auth0-net-sdk-utils (npm)

MAL-2026-4302

Malicious code in auth0-aspnetcore-utils (npm)

MAL-2026-4335

Malicious code in webservices.rest (npm)

MAL-2026-4336

Malicious code in webservices.rest-utils (npm)

MAL-2026-4307

Malicious code in chai-as-redeploy (npm)

MAL-2026-4333

Malicious code in vite-plugin-env-compat-1.5 (npm)

MAL-2026-4334

Malicious code in vite-plugin-env-compat-plus (npm)

MAL-2026-4314

Malicious code in expo-config-plugin-typescript (npm)

MAL-2026-4332

Malicious code in unique-string-64 (npm)

MAL-2026-4321

Malicious code in motion-ui-tool (npm)

MAL-2026-4312

Malicious code in explorhub-mcp-server (npm)

MAL-2026-4310

Malicious code in explorhub-ai-agent (npm)

MAL-2026-4309

Malicious code in eh-bridge-utils (npm)

MAL-2026-4313

Malicious code in explorhub-sdk (npm)

MAL-2026-4311

Malicious code in explorhub-claude-bridge (npm)

MAL-2026-4308

Malicious code in core-utility-tools (npm)

MAL-2026-4300

Malicious code in apple-app-store-server-library-v3 (npm)

MAL-2026-4315

Malicious code in flownodelp5 (npm)

MAL-2026-4343

Malicious code in wnba-parent (npm)

MAL-2026-4322

Malicious code in nba-blocker-plugin (npm)

MAL-2026-4320

Malicious code in mobile-international (npm)

MAL-2026-4323

Malicious code in nba-cdn-plugin (npm)

MAL-2026-4337

Malicious code in wm-plugin-create-iframe-capturing (npm)