Supply Chain Incidents

MAL-2026-907

Malicious code in tronpad (PyPI)

MAL-2026-906

Malicious code in cucumber_json_schema (RubyGems)

MAL-2026-905

Malicious code in marshmellows (PyPI)

MAL-2026-904

Malicious code in strands-agents-anthropic (PyPI)

MAL-2026-903

Malicious code in requests-toolkit (PyPI)

MAL-2026-902

Malicious code in crc32fast (PyPI)

MAL-2026-900

Malicious code in cubaflixdownload (PyPI)

MAL-2026-901

Malicious code in platforms (PyPI)

MAL-2026-899

Malicious code in dzuseragents (PyPI)

MAL-2024-12375

Malicious code in langraph (PyPI)

MAL-2026-898

Malicious code in magicwolf (PyPI)

MAL-2026-897

Malicious code in clawdest (PyPI)

MAL-2026-896

Malicious code in sinon-web3-chain (npm)

MAL-2026-895

Malicious code in json-mapping-src (npm)

MAL-2026-894

Malicious code in troncloud (PyPI)

MAL-2026-879

Malicious code in codexworld (npm)

MAL-2026-881

Malicious code in contosoapp (npm)

MAL-2026-890

Malicious code in responsible-ai (npm)

MAL-2026-888

Malicious code in pyright-root (npm)

MAL-2026-887

Malicious code in pyrefly (npm)

MAL-2026-889

Malicious code in responses-starter-app (npm)

MAL-2026-883

Malicious code in ecosystem_ui (npm)

MAL-2026-886

Malicious code in open-answer-engine-frontend (npm)

MAL-2026-884

Malicious code in hxz-protection (npm)