Supply Chain Incidents

MAL-2026-12786

Malicious code in dust-helpers (npm)

MAL-2026-12666

Malicious code in crypto-checkout-api (npm)

MAL-2026-12809

Malicious code in technical-challenge (npm)

MAL-2026-12506

Malicious code in @latlongid/location (npm)

MAL-2026-12518

Malicious code in break-after (npm)

MAL-2026-12794

Malicious code in karapace-docs (npm)

MAL-2026-12803

Malicious code in shiftmarkets-sdk (npm)

MAL-2026-12514

Malicious code in async-mutex-v3 (npm)

MAL-2026-12799

Malicious code in poly-bbc-service (npm)

MAL-2026-12816

Malicious code in wolverinechat (npm)

MAL-2026-12507

Malicious code in @sapappgyver/appgyver-descriptors (npm)

MAL-2026-12807

Malicious code in streak-grid-core (npm)

MAL-2026-12813

Malicious code in twilio-functions (npm)

MAL-2026-12800

Malicious code in sc-font-icons (npm)

MAL-2026-12804

Malicious code in store-locator-widget (npm)

MAL-2026-12509

Malicious code in @shiftmarkets/shift-exchange-root (npm)

MAL-2026-12513

Malicious code in async-mutex-lock (npm)

MAL-2026-12508

Malicious code in @shiftmarkets/no-brainer-sdk (npm)

MAL-2026-12669

Malicious code in dbk-ui-forms (npm)

MAL-2026-12512

Malicious code in appsignal (npm)

MAL-2026-12504

Malicious code in @cy4dev/cydemo-bg-color (npm)

MAL-2026-12806

Malicious code in streak-core-bucket (npm)

MAL-2026-12484

Malicious code in trailserver (npm)

MAL-2026-12496

Malicious code in voicemail (npm)