Supply Chain Incidents

MAL-2026-604

Malicious code in securedrop-workstation-dom0-config (PyPI)

MAL-2026-603

Malicious code in mcp-pdftool-plus (PyPI)

MAL-2026-602

Malicious code in tableasets (PyPI)

MAL-2026-601

Malicious code in tableautes (PyPI)

MAL-2026-600

Malicious code in researchpoc2 (npm)

MAL-2026-599

Malicious code in jwt-pack (npm)

MAL-2026-597

Malicious code in n8n-nodes-comfyui-illu (npm)

MAL-2026-598

Malicious code in wallet-icon-font (npm)

MAL-2026-596

Malicious code in turbotax (npm)

MAL-2026-595

Malicious code in morty-package (PyPI)

MAL-2026-594

Malicious code in epic-asset-uploader (npm)

MAL-2026-593

Malicious code in pypi-package-explore (PyPI)

MAL-2026-591

Malicious code in kol7a (npm)

MAL-2026-592

Malicious code in lvldragdrop (npm)

MAL-2026-590

Malicious code in pytorch-mutex (PyPI)

MAL-2026-584

Malicious code in chai-as-extended (npm)

MAL-2026-589

Malicious code in dotenv-embed (npm)

MAL-2026-585

Malicious code in chai-async-tests (npm)

MAL-2026-588

Malicious code in chai-sub (npm)

MAL-2026-587

Malicious code in chai-px (npm)

MAL-2026-586

Malicious code in chai-chains-async (npm)

MAL-2026-578

Malicious code in @pukpuk1/somsodamsd (npm)

MAL-2026-583

Malicious code in vuejavascript (npm)

MAL-2026-580

Malicious code in somesomesome (npm)