Supply Chain Incidents

MAL-2026-2733

Malicious code in buildkite-test-collector-jest-example (npm)

MAL-2026-2732

Malicious code in buildkite-test-collector-jasmine-example (npm)

MAL-2026-2731

Malicious code in buildkite-test-collector-cypress-example (npm)

MAL-2026-2730

Malicious code in browserstack-utils (npm)

MAL-2026-2729

Malicious code in apl-github-test (npm)

MAL-2026-2728

Malicious code in apl-announcements (npm)

MAL-2026-2727

Malicious code in agent-starter (npm)

MAL-2026-2726

Malicious code in agent-scheduler (npm)

MAL-2026-2725

Malicious code in agent-framework-web (npm)

MAL-2026-2724

Malicious code in agdebugger-frontend (npm)

MAL-2026-2723

Malicious code in actions-label-commenter (npm)

MAL-2026-2722

Malicious code in action-setup-enos (npm)

MAL-2026-2721

Malicious code in access-worker-test (npm)

MAL-2026-2720

Malicious code in aca-review-apps (npm)

MAL-2026-2719

Malicious code in @youcanneverguessthisonereally/test-pkg (npm)

MAL-2026-2718

Malicious code in @the-coca-cola-company/receipt-scanner-admin-lib (npm)

MAL-2026-2717

Malicious code in @tax-taxdev/tools-scripts (npm)

MAL-2026-2715

Malicious code in @mesh-atoms/typography (npm)

MAL-2026-2714

Malicious code in @gameforge/http-server (npm)

MAL-2026-2713

Malicious code in @fuego-tools/analytics (npm)

MAL-2026-2712

Malicious code in @evoja-web/redaction (npm)

MAL-2026-2711

Malicious code in @evoja-web/react-login (npm)

MAL-2026-2710

Malicious code in @evoja-web/create-react-project (npm)

MAL-2026-2709

Malicious code in @appleseed-apple/ac-sass-kit (npm)