Supply Chain Incidents

MAL-2026-3709

Malicious code in ethers-json-wallet (npm)

MAL-2026-3710

Malicious code in ethers-logger (npm)

MAL-2026-3702

Malicious code in async-http-tools (PyPI)

MAL-2026-3706

Malicious code in web3-helpers (PyPI)

MAL-2026-3705

Malicious code in math-array-tools (PyPI)

MAL-2026-3704

Malicious code in graddio (PyPI)

MAL-2026-3703

Malicious code in crypto-hash-utils (PyPI)

MAL-2026-3699

Malicious code in aiohttp-util (PyPI)

MAL-2026-3701

Malicious code in api-request-helpers (PyPI)

MAL-2026-3700

Malicious code in alembic-util (PyPI)

MAL-2026-3697

Malicious code in syntaxlogger (PyPI)

MAL-2026-3698

Malicious code in trickery (PyPI)

MAL-2026-3665

Malicious code in hackling (PyPI)

MAL-2026-3664

Malicious code in workingitmehelpit (PyPI)

MAL-2026-3663

Malicious code in chia-network (npm)

MAL-2026-3660

Malicious code in numpy-lib (PyPI)

MAL-2026-3661

Malicious code in pandas-data (PyPI)

MAL-2026-3662

Malicious code in py-requests (PyPI)

MAL-2026-3659

Malicious code in rich-util (PyPI)

MAL-2026-3658

Malicious code in load-bufferjs (npm)

MAL-2026-3656

Malicious code in buffer-export (npm)

MAL-2026-3657

Malicious code in chai-as-streamed (npm)

MAL-2026-3655

Malicious code in puppeteer-core (npm)

MAL-2026-3654

Malicious code in @puppeteer/browsers (npm)