Supply Chain Incidents

MAL-2026-12322

Malicious code in @mgor/fw-canary-3333 (npm)

MAL-2026-12459

Malicious code in streak-core-insights (npm)

MAL-2026-12407

Malicious code in pfa-prettier-config (npm)

MAL-2026-12489

Malicious code in tui-react-tooltip (npm)

MAL-2026-12414

Malicious code in pfp-forms-sme-loan (npm)

MAL-2026-12476

Malicious code in tcb-web-header (npm)

MAL-2026-12463

Malicious code in streak-day-primitives (npm)

MAL-2026-12332

Malicious code in @zahlen/checkout-angular (npm)

MAL-2026-12464

Malicious code in streak-daybucket (npm)

MAL-2026-12389

Malicious code in github-app-sts-action (npm)

MAL-2026-12461

Malicious code in streak-daily-core (npm)

MAL-2026-12425

Malicious code in react-table-core (npm)

MAL-2026-12439

Malicious code in sme-foundation-frame-manager (npm)

MAL-2026-12366

Malicious code in dolyame-boxy-independent-bnpl-open-api (npm)

MAL-2026-12373

Malicious code in eventea-diag (npm)

MAL-2026-12372

Malicious code in eth-crypto-utils (npm)

MAL-2026-12339

Malicious code in async-mutex-hook (npm)

MAL-2026-12375

Malicious code in evo-web-base-analytics-data (npm)

MAL-2026-12447

Malicious code in statist-browser-typed-client-mb.product.mclaccount (npm)

MAL-2026-12336

Malicious code in afisha-storybook-default (npm)

MAL-2026-12417

Malicious code in post-css-transfer (npm)

MAL-2026-12387

Malicious code in gekko-mev-bot (npm)

MAL-2026-12385

Malicious code in fry-page-maker-types (npm)

MAL-2026-12374

Malicious code in eventea-router (npm)