Supply Chain Incidents

MAL-2026-2967

Malicious code in 6161test1234 (npm)

MAL-2026-2966

Malicious code in com.tencent.puerts.agent (npm)

MAL-2026-2965

Malicious code in build-metadata-logger (PyPI)

MAL-2026-2964

Malicious code in buildenv-collector (PyPI)

MAL-2026-2963

Malicious code in typelimagic (PyPI)

MAL-2026-2962

Malicious code in my-package-jiecub3 (PyPI)

MAL-2026-2961

Malicious code in apple-internal-security-poc-frank (npm)

MAL-2026-2960

Malicious code in apple-auth-internal (npm)

MAL-2026-2957

Malicious code in cycode-dev (PyPI)

MAL-2026-2958

Malicious code in mysten_metrics (crates.io)

MAL-2026-2956

Malicious code in @serasa/core (npm)

MAL-2026-2952

Malicious code in @settle-sea/supporting-documents (npm)

MAL-2026-2954

Malicious code in bmg-web-features (npm)

MAL-2026-2953

Malicious code in bmg-web (npm)

MAL-2026-2955

Malicious code in megabank-worklist (npm)

MAL-2026-2959

Malicious code in internal_insights_enabled (npm)

MAL-2026-2951

Malicious code in hifromhere1 (npm)

MAL-2026-2950

Malicious code in tailwind-text-fill (npm)

MAL-2026-2949

Malicious code in pathjoin (PyPI)

MAL-2026-2948

Malicious code in leavemealone (PyPI)

MAL-2026-2946

Malicious code in moonbit-metrics-validator (PyPI)

MAL-2026-2947

Malicious code in moonbit-schema-utils (PyPI)

MAL-2026-2945

Malicious code in moonbit-locale-compat (PyPI)

MAL-2026-2941

Malicious code in npm-doc-deploy (npm)