Supply Chain Incidents

MAL-2026-12260

Malicious code in tinkoff-statist-browser-typed-client-eventea.projects.smartcam (npm)

tinkoff-boxy-desktop-two-panel-right-image

MAL-2026-12230

Malicious code in tinkoff-boxy-desktop-two-panel-right-image (npm)

tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common

MAL-2026-12270

Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.dynamicteasers.common (npm)

tinkoff-statist-browser-typed-client-sme.users.origination.web

MAL-2026-12277

Malicious code in tinkoff-statist-browser-typed-client-sme.users.origination.web (npm)

tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events

MAL-2026-12275

Malicious code in tinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events (npm)

Typosquat

tinkoff-statist-browser-typed-client-investing.product.pulse

MAL-2026-12262

Malicious code in tinkoff-statist-browser-typed-client-investing.product.pulse (npm)

tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage

MAL-2026-12261

Malicious code in tinkoff-statist-browser-typed-client-investaccounting.events.templatepage.mainpage (npm)

tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica

MAL-2026-12254

Malicious code in tinkoff-statist-browser-typed-client-automlplatform.nlppl.classica (npm)

tinkoff-test-app-child-app

MAL-2026-12282

Malicious code in tinkoff-test-app-child-app (npm)

tinkoff-pfpa-tools

MAL-2026-12251

Malicious code in tinkoff-pfpa-tools (npm)

tinkoff-terminal-kit-datetime

MAL-2026-12280

Malicious code in tinkoff-terminal-kit-datetime (npm)

Typosquat

tinkoff-ui-angular-addon-wysiwyg

MAL-2026-12283

Malicious code in tinkoff-ui-angular-addon-wysiwyg (npm)

tinkoff-component-limits

MAL-2026-12238

Malicious code in tinkoff-component-limits (npm)

tinkoff-pfp-atom-desktop-carousel

MAL-2026-12245

Malicious code in tinkoff-pfp-atom-desktop-carousel (npm)

tinkoff-pfp-block-mobile-advert-footer

MAL-2026-12248

Malicious code in tinkoff-pfp-block-mobile-advert-footer (npm)

tinkoff-statist-browser-typed-client-sme.platform.mobile.employees.common.events

MAL-2026-12271

Malicious code in tinkoff-statist-browser-typed-client-sme.platform.mobile.employees.common.events (npm)

tinkoff-statist-browser-typed-client-test.softwarecenter.metrics

MAL-2026-12278

Malicious code in tinkoff-statist-browser-typed-client-test.softwarecenter.metrics (npm)

Typosquat

tinkoff-codeceptjs-storyshots

MAL-2026-12236

Malicious code in tinkoff-codeceptjs-storyshots (npm)

tinkoff-boxy-mobile-separator

MAL-2026-12235

Malicious code in tinkoff-boxy-mobile-separator (npm)

tinkoff-codeceptjs-storyshots-alpha

MAL-2026-12237

Malicious code in tinkoff-codeceptjs-storyshots-alpha (npm)

tinkoff-boxy-atom-text-link

MAL-2026-12227

Malicious code in tinkoff-boxy-atom-text-link (npm)

statist-browser-typed-client-sme.salary.web.metrics

MAL-2026-12215

Malicious code in statist-browser-typed-client-sme.salary.web.metrics (npm)

tinkoff-pfp-block-mobile-panels

MAL-2026-12249

Malicious code in tinkoff-pfp-block-mobile-panels (npm)

statist-browser-typed-client-sme.platform.web.productsnavigation.events

MAL-2026-12214

Malicious code in statist-browser-typed-client-sme.platform.web.productsnavigation.events (npm)