Supply Chain Incidents

MAL-2026-1202

Malicious code in mvn-runtime (npm)

MAL-2026-1188

Malicious code in alpha-replicator (npm)

MAL-2026-1209

Malicious code in tailwindcss-form-bundler (npm)

MAL-2026-1208

Malicious code in tailwindcss-fonts-bundler (npm)

MAL-2026-1193

Malicious code in cloud-apis (npm)

MAL-2026-1204

Malicious code in polygon-bitquery-api (npm)

MAL-2026-1210

Malicious code in tailwindcss-forms-animation (npm)

MAL-2026-1201

Malicious code in mongos-api (npm)

MAL-2026-1200

Malicious code in mongoose-apis (npm)

MAL-2026-1213

Malicious code in turbo-json-parser (npm)

MAL-2026-1212

Malicious code in tailwindcss-forms-componentes (npm)

MAL-2026-1214

Malicious code in typescript-constructors (npm)

MAL-2026-1211

Malicious code in tailwindcss-forms-component (npm)

MAL-2026-1190

Malicious code in bubblemap-bypass-sdk (npm)

MAL-2026-1207

Malicious code in selfbot-lofy (npm)

MAL-2026-1195

Malicious code in consolelofy (npm)

MAL-2026-1189

Malicious code in bmath (npm)

MAL-2026-1186

Malicious code in @powpegtest/powpeg (npm)

MAL-2026-1196

Malicious code in demo-ip-package (npm)

MAL-2026-1197

Malicious code in demo-ip-package-cm (npm)

MAL-2026-1198

Malicious code in flycord (npm)

MAL-2026-1187

Malicious code in @twilio-client/twilio-client (npm)

MAL-2026-1199

Malicious code in fps-logger (npm)

MAL-2026-1185

Malicious code in @bookings.microsoft.com/s (npm)