Supply Chain Incidents

MAL-2026-6280

Malicious code in ip-rotat (PyPI)

MAL-2026-6278

Malicious code in ts-wross (npm)

MAL-2026-6276

Malicious code in node-core-libs (npm)

MAL-2026-6277

Malicious code in search-from-search (npm)

MAL-2026-6275

Malicious code in @ts-apis/ts-utils (npm)

MAL-2026-6274

Malicious code in web3-token-helper (npm)

MAL-2026-6273

Malicious code in zod-pino (npm)

MAL-2026-6272

Malicious code in @variational/common-ui (npm)

MAL-2026-6271

Malicious code in node-fetch-utils (npm)

MAL-2026-6267

Malicious code in vitest-cli (npm)

MAL-2026-6270

Malicious code in zomato-mcp (npm)

MAL-2026-6269

Malicious code in zomato-espresso (npm)

MAL-2026-6268

Malicious code in zomato-core (npm)

MAL-2026-6265

Malicious code in sn-internal-testjgsakjdkjadkjah (npm)

MAL-2026-6266

Malicious code in test-package-sajsdkashdj (npm)

MAL-2026-6264

Malicious code in search-from-feed (npm)

MAL-2026-6263

Malicious code in gd-auth-client (npm)

MAL-2026-6257

Malicious code in crud-respect (npm)

MAL-2026-6258

Malicious code in onboarding-respects-modal (npm)

MAL-2026-6279

Malicious code in forge-jsx4 (npm)

MAL-2026-6259

Malicious code in respects-switch (npm)

MAL-2026-6262

Malicious code in inversiones-common (PyPI)

MAL-2026-6255

Malicious code in fork-angular-daterangepicker (npm)

MAL-2026-6249

Malicious code in blinkit-core (npm)