Supply Chain Incidents

MAL-2026-4757

Malicious code in morin (PyPI)

MAL-2026-4742

Malicious code in aurapro-ui (PyPI)

MAL-2026-4741

Malicious code in aurafarmer (PyPI)

MAL-2026-4767

Malicious code in silly-logger (PyPI)

MAL-2026-4761

Malicious code in openirf (PyPI)

MAL-2026-4748

Malicious code in eplang (PyPI)

MAL-2026-4764

Malicious code in pycalendar-api (PyPI)

MAL-2026-4751

Malicious code in glass-of-water (PyPI)

MAL-2026-4758

Malicious code in nebulix-ai (PyPI)

MAL-2026-4766

Malicious code in saas-common-lib-473815 (PyPI)

MAL-2026-4745

Malicious code in clearml-truen-patch (PyPI)

MAL-2026-4769

Malicious code in soundsource (PyPI)

MAL-2026-4743

Malicious code in buddyme (PyPI)

MAL-2026-4765

Malicious code in qontract-reconcile (PyPI)

MAL-2026-4746

Malicious code in crw (PyPI)

MAL-2026-4176

Malicious code in dabrius-utils (PyPI)

MAL-2026-4174

Malicious code in durabletask (PyPI)

GHSA-xmpw-2vmm-p4p6

Malicious code in guardrails-ai 0.10.1 (supply chain compromise)

MAL-2026-4166

Malicious code in tarpackage (PyPI)

MAL-2026-4163

Malicious code in vfat-ai (PyPI)

MAL-2026-4162

Malicious code in vfat (PyPI)

MAL-2026-3835

Malicious code in solana-web3-alt (PyPI)

MAL-2026-3834

Malicious code in foundry-utils (PyPI)

MAL-2026-3829

Malicious code in pyenvprep (PyPI)