Supply Chain Incidents

MAL-2026-14555

Malicious code in ekx-report-utils (PyPI)

MAL-2026-14552

Malicious code in mathkitlite (PyPI)

MAL-2026-14545

Malicious code in pybitjs (PyPI)

MAL-2026-14542

Malicious code in trongridet (PyPI)

MAL-2026-14525

Malicious code in 0xfighter3 (PyPI)

MAL-2026-14524

Malicious code in bigquery-agent-analytics-tracing (PyPI)

MAL-2026-14523

Malicious code in rce-test (PyPI)

MAL-2026-14522

Malicious code in syntaxerror-package-12345 (PyPI)

MAL-2026-14516

Malicious code in minecraft-ytreceiver (PyPI)

MAL-2026-14488

Malicious code in python-walletlibr-v (PyPI)

MAL-2026-15693

Malicious code in py-devoli-common (PyPI)

MAL-2026-14444

Malicious code in msrcpoc (PyPI)

MAL-2026-14401

Malicious code in multyproccess (PyPI)

MAL-2026-14389

Malicious code in envprovision (PyPI)

MAL-2026-14388

Malicious code in cryptgraphy (PyPI)

MAL-2026-14384

Malicious code in mlflow-otel-instrumentor (PyPI)

GHSA-gf32-cmjh-8m9v

Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

MAL-2026-14358

Malicious code in scrambleeeer (PyPI)

MAL-2026-14351

Malicious code in requests-crypt (PyPI)

MAL-2026-14350

Malicious code in scrambleeer (PyPI)

MAL-2026-14349

Malicious code in boto4 (PyPI)

MAL-2026-14341

Malicious code in reqcrypts (PyPI)

MAL-2026-14308

Malicious code in libasync (PyPI)

MAL-2026-14306

Malicious code in rc4-secure (PyPI)