Supply Chain Incidents

MAL-2026-3631

Malicious code in knot-date-utils-rb (RubyGems)

MAL-2026-3620

Malicious code in github.com/BufferZoneCorp/config-loader (Go)

MAL-2026-3630

Malicious code in knot-activesupport-logger (RubyGems)

MAL-2026-3629

Malicious code in github.com/BufferZoneCorp/net-helper (Go)

MAL-2026-3627

Malicious code in github.com/BufferZoneCorp/grpc-client (Go)

MAL-2026-3635

Malicious code in knot-rspec-formatter-json (RubyGems)

MAL-2026-3621

Malicious code in github.com/BufferZoneCorp/go-envconfig (Go)

MAL-2026-3653

Malicious code in @design-system-coopeuch/web (npm)

MAL-2026-3686

Malicious code in amino-fix (PyPI)

MAL-2026-3648

Malicious code in auth-javascript (npm)

MAL-2026-3652

Malicious code in supabase-javascript (npm)

MAL-2026-3651

Malicious code in ms-graph-types (npm)

MAL-2026-3649

Malicious code in iceberg-javascript (npm)

MAL-2026-3650

Malicious code in microsoft-applicationinsights-common (npm)

MAL-2026-3619

Malicious code in txwrap (PyPI)

MAL-2026-3684

Malicious code in @gusmano/reext (npm)

MAL-2026-3685

Malicious code in always-updates (PyPI)

MAL-2026-3616

Malicious code in afk-react-intl (npm)

MAL-2026-3617

Malicious code in katal-platform-versions (npm)

MAL-2026-3615

Malicious code in ai-spellcheckers (PyPI)

MAL-2026-3680

Malicious code in @a91082900/test_package (npm)

MAL-2026-3614

Malicious code in aoflmkt (npm)

MAL-2026-3613

Malicious code in aoflcorp (npm)

MAL-2026-3693

Malicious code in kaggle-runner (PyPI)