Supply Chain Incidents

MAL-2026-2979

Malicious code in tsdoc-build-rig (npm)

MAL-2026-2978

Malicious code in @oec-settlement/react-router (npm)

MAL-2026-2975

Malicious code in crypto-keccak-js (npm)

MAL-2026-2977

Malicious code in ts-utils-dev (npm)

MAL-2026-2976

Malicious code in gleb-js (npm)

MAL-2026-2973

Malicious code in claudcode-cli (npm)

MAL-2026-2974

Malicious code in claudcode-mcp (npm)

MAL-2026-2969

Malicious code in @usealloy/api-contract (npm)

MAL-2026-2970

Malicious code in @usealloy/component-library (npm)

MAL-2026-2968

Malicious code in @bitunix/test (npm)

MAL-2026-2972

Malicious code in aven_types (npm)

MAL-2026-2971

Malicious code in @usealloy/typegen (npm)

MAL-2026-2967

Malicious code in 6161test1234 (npm)

MAL-2026-2966

Malicious code in com.tencent.puerts.agent (npm)

MAL-2026-2965

Malicious code in build-metadata-logger (PyPI)

MAL-2026-2964

Malicious code in buildenv-collector (PyPI)

MAL-2026-2963

Malicious code in typelimagic (PyPI)

MAL-2026-2962

Malicious code in my-package-jiecub3 (PyPI)

MAL-2026-2960

Malicious code in apple-auth-internal (npm)

MAL-2026-2961

Malicious code in apple-internal-security-poc-frank (npm)

MAL-2026-2957

Malicious code in cycode-dev (PyPI)

MAL-2026-2958

Malicious code in mysten_metrics (crates.io)

MAL-2026-2956

Malicious code in @serasa/core (npm)

MAL-2026-2952

Malicious code in @settle-sea/supporting-documents (npm)