Supply Chain Incidents

MAL-2026-446

Malicious code in code-transfering-4 (PyPI)

MAL-2026-444

Malicious code in terminalbrush (PyPI)

MAL-2026-443

Malicious code in 1q847 (PyPI)

MAL-2026-442

Malicious code in xadauiom (PyPI)

MAL-2026-440

Malicious code in anduril-lattice-sdk-grpc-python (PyPI)

MAL-2026-441

Malicious code in spellcheckpy (PyPI)

MAL-2026-439

Malicious code in tv-admin-commons (npm)

MAL-2026-438

Malicious code in ts-tweetnacl-utils (npm)

MAL-2026-437

Malicious code in lumo-api-client (npm)

MAL-2026-436

Malicious code in jquery-ajaxchimp (npm)

MAL-2026-435

Malicious code in aligntype (npm)

MAL-2026-409

Malicious code in chai-async-test (npm)

MAL-2026-415

Malicious code in dotenv-expanded (npm)

MAL-2026-426

Malicious code in qdrant-js (npm)

MAL-2026-434

Malicious code in weaviate-js (npm)

MAL-2026-427

Malicious code in replicate-js (npm)

MAL-2026-418

Malicious code in nanoid-js (npm)

MAL-2026-425

Malicious code in plugin-vue (npm)

MAL-2026-430

Malicious code in storage-types (npm)

MAL-2026-424

Malicious code in plugin-react-swc (npm)

MAL-2026-407

Malicious code in babel-js (npm)

MAL-2026-406

Malicious code in aws-crt-nodejs (npm)

MAL-2026-414

Malicious code in debox-rn (npm)

MAL-2026-431

Malicious code in testpkg-yilider690 (npm)