Supply Chain Incidents

MAL-2026-3688

Malicious code in d4rktg (PyPI)

Backdoor

amino-fix

MAL-2026-3686

Malicious code in amino-fix (PyPI)

txwrap

MAL-2026-3619

Malicious code in txwrap (PyPI)

Backdoor

always-updates

MAL-2026-3685

Malicious code in always-updates (PyPI)

ai-spellcheckers

MAL-2026-3615

Malicious code in ai-spellcheckers (PyPI)

kaggle-runner

MAL-2026-3693

Malicious code in kaggle-runner (PyPI)

dlty

MAL-2026-3690

Malicious code in dlty (PyPI)

crazehub

MAL-2026-3687

Malicious code in crazehub (PyPI)

projz-py

MAL-2026-3696

Malicious code in projz-py (PyPI)

pirxcypackage

MAL-2026-3695

Malicious code in pirxcypackage (PyPI)

mymaldependency

MAL-2026-3694

Malicious code in mymaldependency (PyPI)

enhancer

MAL-2026-3691

Malicious code in enhancer (PyPI)

dcchbot

MAL-2026-3689

Malicious code in dcchbot (PyPI)

guan

MAL-2026-3692

Malicious code in guan (PyPI)

guardrails-ai

MAL-2026-3607

Malicious code in guardrails-ai (PyPI)

mistralai

MAL-2026-3608

Malicious code in mistralai (PyPI)

apkeep

MAL-2026-3431

Malicious code in apkeep (PyPI)

Typosquat

openai-spellchecker

MAL-2026-3429

Malicious code in openai-spellchecker (PyPI)

xxx-bale

MAL-2026-3428

Malicious code in xxx-bale (PyPI)

guarddog

GHSA-m5p4-gvpx-4mvr

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

1 CVE

mpkg123

MAL-2026-3426

Malicious code in mpkg123 (PyPI)

xxoo-bale

MAL-2026-3425

Malicious code in xxoo-bale (PyPI)

dlocal-cli

MAL-2026-3424

Malicious code in dlocal-cli (PyPI)

Typosquat

django-b64-img

MAL-2026-3413

Malicious code in django-b64-img (PyPI)

Backdoor