Supply Chain Incidents

MAL-2026-4322

Malicious code in nba-blocker-plugin (npm)

MAL-2026-4323

Malicious code in nba-cdn-plugin (npm)

MAL-2026-4339

Malicious code in wm-plugin-native-functions-restorer (npm)

MAL-2026-4338

Malicious code in wm-plugin-json-conditions (npm)

MAL-2026-4337

Malicious code in wm-plugin-create-iframe-capturing (npm)

MAL-2026-4340

Malicious code in wm-plugin-open-teach-me-after-deployable-played (npm)

MAL-2026-4341

Malicious code in wm-plugin-set-walkme-language (npm)

MAL-2026-4342

Malicious code in wm-w5g-preview (npm)

MAL-2026-4359

Malicious code in @agora-sdk/react-js (npm)

MAL-2026-4318

Malicious code in levex-press (npm)

MAL-2026-4327

Malicious code in ts-relayer-client (npm)

MAL-2026-4319

Malicious code in lint-builder-logger (npm)

MAL-2026-4324

Malicious code in ts-big-lib (npm)

MAL-2026-4296

Malicious code in mcp-dashboards-shared (npm)

MAL-2026-4295

Malicious code in git-en-boite-inventory (npm)

MAL-2026-4294

Malicious code in flow-parser-oxidized (npm)

MAL-2026-4292

Malicious code in chai-as-buffer (npm)

MAL-2026-4293

Malicious code in chai-as-float (npm)

MAL-2026-4754

Malicious code in heims (PyPI)

MAL-2026-4423

Malicious code in @refactco/refact-os (npm)

MAL-2026-4679

Malicious code in system-user-identifier-cli (npm)

MAL-2026-4291

Malicious code in pylogkt (PyPI)

MAL-2026-4737

Malicious code in your-unique-package-name1 (npm)

MAL-2026-4623

Malicious code in npm-builderio-qwik-poc (npm)