Supply Chain Incidents

MAL-2026-12363

Malicious code in dolyame-boxy-atom-bnpl-email-form (npm)

MAL-2026-12391

Malicious code in hubert-verify-primary-email-am (npm)

MAL-2026-12365

Malicious code in dolyame-boxy-independent-bnpl-info-images (npm)

MAL-2026-12434

Malicious code in saas-f-testing (npm)

MAL-2026-12320

Malicious code in @lizhao1/memorax-code-internal (npm)

MAL-2026-12422

Malicious code in quorvex (npm)

MAL-2026-12428

Malicious code in rollup-packages-node-polyfills (npm)

MAL-2026-12500

Malicious code in warp-drive-internal-tooling (npm)

MAL-2026-12335

Malicious code in aegis-runtime (npm)

MAL-2026-12345

Malicious code in calendar-streak-core (npm)

MAL-2026-12347

Malicious code in ccxt-trading (npm)

MAL-2026-12328

Malicious code in @rentwise/common (npm)

MAL-2026-12444

Malicious code in statist-browser-typed-client-coretech.web.metrics (npm)

MAL-2026-12493

Malicious code in utility-kit-ts (npm)

MAL-2026-12364

Malicious code in dolyame-boxy-atom-bnpl-store-button (npm)

MAL-2026-12440

Malicious code in sme-rko-finance-front-shared-entity-groups-models (npm)

MAL-2026-12487

Malicious code in travel-core-utils-object (npm)

MAL-2026-12501

Malicious code in william-data-formatter-x (npm)

MAL-2026-12460

Malicious code in streak-count-core (npm)

MAL-2026-12410

Malicious code in pfp-block-mobile-steps (npm)

MAL-2026-12377

Malicious code in express-mongo-santi (npm)

MAL-2026-12488

Malicious code in tt-help-cli-ycl (npm)

MAL-2026-12310

Malicious code in statist-browser-typed-client-sme.platform.web.teasers (npm)

MAL-2026-12309

Malicious code in statist-browser-typed-client-jumptaxi.feature.contacts (npm)