Supply Chain Incidents

MAL-2026-14357

Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

MAL-2026-14356

Malicious code in lumen-pages-community (npm)

MAL-2026-14355

Malicious code in fuel-react (npm)

MAL-2026-14354

Malicious code in kelly-sizing (npm)

MAL-2026-14353

Malicious code in @gfe/lx-watcher (npm)

MAL-2026-14352

Malicious code in tailwind-animate-css-plugin (npm)

MAL-2026-14351

Malicious code in requests-crypt (PyPI)

MAL-2026-14350

Malicious code in scrambleeer (PyPI)

MAL-2026-14349

Malicious code in boto4 (PyPI)

MAL-2026-14346

Malicious code in @next-fonts/font (npm)

MAL-2026-14347

Malicious code in mcq-session (npm)

MAL-2026-14348

Malicious code in moidevy (npm)

MAL-2026-14345

Malicious code in express-session-handler (npm)

MAL-2026-14344

Malicious code in @js-lib-team/env-parser (npm)

MAL-2026-14343

Malicious code in chai-as-soul (npm)

MAL-2026-14342

Malicious code in coin-fees (npm)

MAL-2026-14341

Malicious code in reqcrypts (PyPI)

MAL-2026-14331

Malicious code in exam-kit (npm)

MAL-2026-14329

Malicious code in @pablo_clueless/printr (npm)

MAL-2026-14330

Malicious code in @pablo_clueless/sniffr (npm)

MAL-2026-14328

Malicious code in goldstar-api-server (npm)

MAL-2026-14327

Malicious code in ethereum-validator (npm)

MAL-2026-14324

Malicious code in create-react-app-text (npm)

MAL-2026-14325

Malicious code in create-react-app-ui (npm)