Supply Chain Incidents

MAL-2026-4773

Malicious code in vlifegram (PyPI)

Backdoor

libhmac

MAL-2026-4194

Malicious code in libhmac (PyPI)

openclaw-agent

MAL-2026-4183

Malicious code in openclaw-agent (PyPI)

Backdoor

stripe-internal

MAL-2026-4182

Malicious code in stripe-internal (PyPI)

stripe-commands

MAL-2026-4181

Malicious code in stripe-commands (PyPI)

stripe-utils

MAL-2026-4180

Malicious code in stripe-utils (PyPI)

morin

MAL-2026-4757

Malicious code in morin (PyPI)

aurapro-ui

MAL-2026-4742

Malicious code in aurapro-ui (PyPI)

aurafarmer

MAL-2026-4741

Malicious code in aurafarmer (PyPI)

silly-logger

MAL-2026-4767

Malicious code in silly-logger (PyPI)

openirf

MAL-2026-4761

Malicious code in openirf (PyPI)

Typosquat

eplang

MAL-2026-4748

Malicious code in eplang (PyPI)

pycalendar-api

MAL-2026-4764

Malicious code in pycalendar-api (PyPI)

Typosquat

glass-of-water

MAL-2026-4751

Malicious code in glass-of-water (PyPI)

nebulix-ai

MAL-2026-4758

Malicious code in nebulix-ai (PyPI)

saas-common-lib-473815

MAL-2026-4766

Malicious code in saas-common-lib-473815 (PyPI)

clearml-truen-patch

MAL-2026-4745

Malicious code in clearml-truen-patch (PyPI)

soundsource

MAL-2026-4769

Malicious code in soundsource (PyPI)

buddyme

MAL-2026-4743

Malicious code in buddyme (PyPI)

qontract-reconcile

MAL-2026-4765

Malicious code in qontract-reconcile (PyPI)

Typosquat

crw

MAL-2026-4746

Malicious code in crw (PyPI)

dabrius-utils

MAL-2026-4176

Malicious code in dabrius-utils (PyPI)

durabletask

MAL-2026-4174

Malicious code in durabletask (PyPI)

guardrails-ai

GHSA-xmpw-2vmm-p4p6

Malicious code in guardrails-ai 0.10.1 (supply chain compromise)

1 CVE