Supply Chain Incidents

MAL-2026-16142

Malicious code in python-fork (PyPI)

MAL-2026-16141

Malicious code in platform-telemetry-client (PyPI)

MAL-2026-16133

Malicious code in langgrap (PyPI)

MAL-2026-16136

Malicious code in transfomers (PyPI)

MAL-2026-16134

Malicious code in ollamaa (PyPI)

MAL-2026-16135

Malicious code in openaii (PyPI)

MAL-2026-16131

Malicious code in aitextutils-py (PyPI)

MAL-2026-16130

Malicious code in aitextkit-py (PyPI)

MAL-2026-16128

Malicious code in pymem-win (PyPI)

MAL-2026-16127

Malicious code in eth-account-web3 (PyPI)

MAL-2026-16129

Malicious code in web3-eth-account (PyPI)

MAL-2026-16125

Malicious code in lucy-python-script-2030 (PyPI)

MAL-2026-16122

Malicious code in pylever (PyPI)

MAL-2026-16099

Malicious code in bq-sdist-probe-vrp (PyPI)

MAL-2026-16098

Malicious code in bq-build-probe-vrp-2026 (PyPI)

MAL-2026-16121

Malicious code in websetup (PyPI)

MAL-2026-16080

Malicious code in databricks-webapp-navigation-homepage (PyPI)

GHSA-5wp5-5229-5g6q

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

MAL-2026-16017

Malicious code in telegram-helper (PyPI)

MAL-2026-16016

Malicious code in cv-train (PyPI)

MAL-2026-15938

Malicious code in dac-tools (PyPI)

MAL-2026-15937

Malicious code in minecraftmodes (PyPI)

MAL-2026-15936

Malicious code in trongridew (PyPI)

MAL-2026-15935

Malicious code in proxycer (PyPI)