Supply Chain Incidents

MAL-2026-652

Malicious code in chia-pool-reference (PyPI)

MAL-2026-653

Malicious code in credit-decision-metrics (PyPI)

MAL-2026-654

Malicious code in zabitog (PyPI)

MAL-2026-650

Malicious code in tableapy (PyPI)

MAL-2026-649

Malicious code in callapirequests (PyPI)

MAL-2026-646

Malicious code in picking-miniapp (npm)

MAL-2026-647

Malicious code in react-native-expofp (npm)

MAL-2026-644

Malicious code in dise-pkt (npm)

MAL-2026-643

Malicious code in @hemanshu_patil/xcode-windows-x64 (npm)

MAL-2026-642

Malicious code in @hemanshu_patil/xcode (npm)

MAL-2026-648

Malicious code in yazxzpedia (npm)

MAL-2026-645

Malicious code in libsignal-yazxzpedia (npm)

MAL-2026-641

Malicious code in connections-api-requests (PyPI)

MAL-2026-640

Malicious code in connections-api-request (PyPI)

MAL-2026-639

Malicious code in connection-api-requests (PyPI)

MAL-2026-632

Malicious code in cowsay-deluxe (npm)

MAL-2026-630

Malicious code in cowsay-allcaps (npm)

MAL-2026-637

Malicious code in launchdarkly-cpp-networking (npm)

MAL-2026-636

Malicious code in idv-script (npm)

MAL-2026-631

Malicious code in cowsay-caps (npm)

MAL-2026-629

Malicious code in client-desktop-web-installer (npm)

MAL-2026-628

Malicious code in @casaverso/frontend-core (npm)

MAL-2026-633

Malicious code in cowsay-fancy (npm)

MAL-2026-634

Malicious code in eslint-config-minecraft-scripting (npm)