Supply Chain Incidents

MAL-2026-1034

Malicious code in chai-lite-lib (npm)

MAL-2026-1033

Malicious code in duer-js (npm)

MAL-2026-1031

Malicious code in react-svg-helper-fast (npm)

MAL-2026-1030

Malicious code in chai-as-utils (npm)

MAL-2026-1032

Malicious code in sample-custom-component (npm)

MAL-2026-1029

Malicious code in geocommunes-geoportal (PyPI)

MAL-2026-1230

Malicious code in @schedaero/react-core (npm)

MAL-2026-1232

Malicious code in @schedaero/yukon (npm)

MAL-2026-1228

Malicious code in @schedaero/bacon (npm)

MAL-2026-1229

Malicious code in @schedaero/net-common (npm)

MAL-2026-1234

Malicious code in uxproject11 (npm)

MAL-2026-1233

Malicious code in projectrtert (npm)

MAL-2026-1231

Malicious code in @schedaero/shared (npm)

MAL-2026-1039

Malicious code in react-devtools-raycast (npm)

MAL-2026-1037

Malicious code in get-fonts (npm)

MAL-2026-1042

Malicious code in trae-browser-inspect (npm)

MAL-2026-1028

Malicious code in examplereactnative76 (npm)

MAL-2026-1026

Malicious code in rncalendareventsexample (npm)

MAL-2026-1027

Malicious code in rtxbbtyols (npm)

MAL-2026-1024

Malicious code in @protonme/routing (npm)

MAL-2026-1025

Malicious code in @unitedcapitalfinancialadvisors/finlife-component-library (npm)

MAL-2026-1022

Malicious code in @coinmetro/app (npm)

MAL-2026-1023

Malicious code in @kiukicom/sidebar (npm)

MAL-2026-1020

Malicious code in @ai-studio-web/app (npm)