Supply Chain Incidents

MAL-2026-12390

Malicious code in hubert-document-actual-insurance-rules-am (npm)

MAL-2026-12433

Malicious code in saas-f-lego-landings (npm)

MAL-2026-12472

Malicious code in sui-migration-audit-rules (npm)

MAL-2026-12441

Malicious code in sme-scripts-shared-library-webpack-plugin (npm)

MAL-2026-12486

Malicious code in travel-core-typings-reducers (npm)

MAL-2026-12412

Malicious code in pfp-forms-independent-sme-glossary-anchor (npm)

MAL-2026-12396

Malicious code in log-min (npm)

MAL-2026-12448

Malicious code in statist-browser-typed-client-mb.product.operations (npm)

MAL-2026-12382

Malicious code in finance-business-company-id-models (npm)

MAL-2026-12324

Malicious code in @nasdtickets/common (npm)

MAL-2026-12456

Malicious code in statist-statist-core (npm)

MAL-2026-12318

Malicious code in @hoteldev/common (npm)

MAL-2026-12437

Malicious code in simplipayng (npm)

MAL-2026-12340

Malicious code in block_package (npm)

MAL-2026-12485

Malicious code in trapp-configuration (npm)

MAL-2026-12401

Malicious code in mcp-audit-sync-internal (npm)

MAL-2026-12370

Malicious code in eslint-plugin-vitest-ts (npm)

MAL-2026-12458

Malicious code in streak-calendar-core (npm)

MAL-2026-12341

Malicious code in bnpl-blocks-independent-bnpl-search (npm)

MAL-2026-12323

Malicious code in @nasddatax/common (npm)

MAL-2026-12490

Malicious code in uniswap-sdk-v4 (npm)

MAL-2026-12367

Malicious code in dolyame-ui-form (npm)

MAL-2026-12360

Malicious code in csv-parser-helper (npm)

MAL-2026-12393

Malicious code in invest-module-cookie (npm)