Supply Chain Incidents

MAL-2026-3614

Malicious code in aoflmkt (npm)

MAL-2026-3613

Malicious code in aoflcorp (npm)

MAL-2026-3611

Malicious code in justenv (npm)

MAL-2026-3612

Malicious code in jwscube (npm)

MAL-2026-3610

Malicious code in housecallpro (npm)

MAL-2026-3600

Malicious code in @mesadev/sdk (npm)

MAL-2026-3605

Malicious code in agentwork-cli (npm)

MAL-2026-3608

Malicious code in mistralai (PyPI)

MAL-2026-3604

Malicious code in @tallyui/storage-sqlite (npm)

MAL-2026-3593

Malicious code in @dirigible-ai/sdk (npm)

MAL-2026-3607

Malicious code in guardrails-ai (PyPI)

MAL-2026-3597

Malicious code in @draftlab/auth-router (npm)

MAL-2026-3603

Malicious code in @tallyui/core (npm)

MAL-2026-3595

Malicious code in @draftauth/core (npm)

MAL-2026-3596

Malicious code in @draftlab/auth (npm)

MAL-2026-3606

Malicious code in ml-toolkit-ts (npm)

MAL-2026-3599

Malicious code in @mesadev/saguaro (npm)

MAL-2026-3602

Malicious code in @ml-toolkit-ts/xgboost (npm)

MAL-2026-3594

Malicious code in @draftauth/client (npm)

MAL-2026-3598

Malicious code in @draftlab/db (npm)

MAL-2026-3601

Malicious code in @ml-toolkit-ts/preprocessing (npm)

MAL-2026-3592

Malicious code in hedwig-tsconfig (npm)

MAL-2026-3587

Malicious code in @uipath/widget.sdk (npm)

MAL-2026-3586

Malicious code in @uipath/vss (npm)