Supply Chain Incidents

MAL-2026-14143

Malicious code in tyepescript-cli (npm)

MAL-2026-14135

Malicious code in @mohamed_nowisar/token3-check (npm)

MAL-2026-14134

Malicious code in @mohamed_nowisar/depconf-canary-test (npm)

MAL-2026-14136

Malicious code in agora402-payment-utils (npm)

MAL-2026-14137

Malicious code in mtslink-depconf-probe-profileusername (npm)

MAL-2026-14138

Malicious code in optimizely-starter-kit-for-fastly-compute (npm)

MAL-2026-14139

Malicious code in prism-registry (npm)

MAL-2026-14158

Malicious code in deepface-weight (PyPI)

MAL-2026-14140

Malicious code in vite-svg-config (npm)

MAL-2026-14133

Malicious code in reqcrypt (PyPI)

MAL-2026-14132

Malicious code in deepface-weights (PyPI)

MAL-2026-14131

Malicious code in infogram-bot (PyPI)

MAL-2026-14130

Malicious code in httpz-requests (PyPI)

MAL-2026-14129

Malicious code in plugin-react-vite (npm)

MAL-2026-14125

Malicious code in @guildai-services/guildai (npm)

MAL-2026-14127

Malicious code in @reducers/projects (npm)

MAL-2026-14126

Malicious code in @milleree/date-display (npm)

MAL-2026-14128

Malicious code in motionspring (npm)

MAL-2026-14124

Malicious code in alphazone (npm)

MAL-2026-14123

Malicious code in @oyo_tech/oyochat_user (npm)

MAL-2026-14119

Malicious code in bcc-design-icons (npm)

MAL-2026-14117

Malicious code in bcc-design (npm)

MAL-2026-14118

Malicious code in core-tailwindcss-utility (npm)

MAL-2026-14120

Malicious code in blastradar (npm)