Supply Chain Incidents

MAL-2026-6255

Malicious code in fork-angular-daterangepicker (npm)

blinkit-core

MAL-2026-6249

Malicious code in blinkit-core (npm)

hyperpure-core

MAL-2026-6250

Malicious code in hyperpure-core (npm)

zomato-sushi

MAL-2026-6254

Malicious code in zomato-sushi (npm)

zomato-logger

MAL-2026-6252

Malicious code in zomato-logger (npm)

zomato-server

MAL-2026-6253

Malicious code in zomato-server (npm)

zomato-config

MAL-2026-6251

Malicious code in zomato-config (npm)

jsonschema-viewer

MAL-2026-6248

Malicious code in jsonschema-viewer (PyPI)

requests-enhancer

MAL-2026-6247

Malicious code in requests-enhancer (PyPI)

Backdoor

d0rk3r

MAL-2026-6246

Malicious code in d0rk3r (PyPI)

d0rk3r-telemetry

MAL-2026-6244

Malicious code in d0rk3r-telemetry (PyPI)

request-cache-py

MAL-2026-6245

Malicious code in request-cache-py (PyPI)

atlasora-config

MAL-2026-6239

Malicious code in atlasora-config (npm)

atlasora-shared

MAL-2026-6241

Malicious code in atlasora-shared (npm)

atlasora-api

MAL-2026-6237

Malicious code in atlasora-api (npm)

atlasora-types

MAL-2026-6242

Malicious code in atlasora-types (npm)

atlasora-sdk

MAL-2026-6240

Malicious code in atlasora-sdk (npm)

atlasora-utils

MAL-2026-6243

Malicious code in atlasora-utils (npm)

atlasora-client

MAL-2026-6238

Malicious code in atlasora-client (npm)

@withgoogle/stitch-sdk

MAL-2026-6256

Malicious code in @withgoogle/stitch-sdk (npm)

query-profile

MAL-2026-6236

Malicious code in query-profile (PyPI)

yian666aikf

MAL-2026-6234

Malicious code in yian666aikf (npm)

Backdoor

yianzzkf6687

MAL-2026-6235

Malicious code in yianzzkf6687 (npm)

Backdoor

fluent-dashboard-panel-metrics

MAL-2026-6233

Malicious code in fluent-dashboard-panel-metrics (PyPI)