Supply Chain Incidents

MAL-2026-3428

Malicious code in xxx-bale (PyPI)

GHSA-m5p4-gvpx-4mvr

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

MAL-2026-3426

Malicious code in mpkg123 (PyPI)

MAL-2026-3425

Malicious code in xxoo-bale (PyPI)

MAL-2026-3424

Malicious code in dlocal-cli (PyPI)

MAL-2026-3413

Malicious code in django-b64-img (PyPI)

MAL-2026-3411

Malicious code in web3-py-checksum (PyPI)

MAL-2026-3408

Malicious code in textwrap-ext (PyPI)

MAL-2026-3407

Malicious code in textwrap-toolkit (PyPI)

MAL-2026-3406

Malicious code in ggfmttygl-new (PyPI)

MAL-2026-3405

Malicious code in ggfmttygl (PyPI)

MAL-2026-3401

Malicious code in bttcli (PyPI)

MAL-2026-3402

Malicious code in python-bittensor-config-v2 (PyPI)

MAL-2026-3403

Malicious code in textwrap-formatter (PyPI)

MAL-2026-3398

Malicious code in ninja-ssh-proto (PyPI)

MAL-2026-3396

Malicious code in ninja-core-optimizer (PyPI)

MAL-2026-3389

Malicious code in eth-wallet-kit (PyPI)

MAL-2026-3392

Malicious code in wallet-scanner-pro (PyPI)

MAL-2026-3391

Malicious code in tron-energy-sdk (PyPI)

MAL-2026-3388

Malicious code in crypto-bot-utils (PyPI)

MAL-2026-3393

Malicious code in web3-tool-sdk (PyPI)

MAL-2026-3390

Malicious code in solana-py-sdk (PyPI)

MAL-2026-3380

Malicious code in justinleaguekems (PyPI)

MAL-2026-3386

Malicious code in yeahmankema (PyPI)