Supply Chain Incidents

MAL-2026-3598

Malicious code in @draftlab/db (npm)

MAL-2026-3600

Malicious code in @mesadev/sdk (npm)

MAL-2026-3606

Malicious code in ml-toolkit-ts (npm)

MAL-2026-3595

Malicious code in @draftauth/core (npm)

MAL-2026-3605

Malicious code in agentwork-cli (npm)

MAL-2026-3593

Malicious code in @dirigible-ai/sdk (npm)

MAL-2026-3599

Malicious code in @mesadev/saguaro (npm)

MAL-2026-3604

Malicious code in @tallyui/storage-sqlite (npm)

MAL-2026-3608

Malicious code in mistralai (PyPI)

MAL-2026-3596

Malicious code in @draftlab/auth (npm)

MAL-2026-3601

Malicious code in @ml-toolkit-ts/preprocessing (npm)

MAL-2026-3603

Malicious code in @tallyui/core (npm)

MAL-2026-3594

Malicious code in @draftauth/client (npm)

MAL-2026-3607

Malicious code in guardrails-ai (PyPI)

MAL-2026-3602

Malicious code in @ml-toolkit-ts/xgboost (npm)

MAL-2026-3597

Malicious code in @draftlab/auth-router (npm)

MAL-2026-3592

Malicious code in hedwig-tsconfig (npm)

MAL-2026-3587

Malicious code in @uipath/widget.sdk (npm)

MAL-2026-3586

Malicious code in @uipath/vss (npm)

MAL-2026-3585

Malicious code in @uipath/vertical-solutions-tool (npm)

MAL-2026-3584

Malicious code in @uipath/uipath-python-bridge (npm)

MAL-2026-3583

Malicious code in @uipath/ui-widgets-multi-file-upload (npm)

MAL-2026-3582

Malicious code in @uipath/traces-tool (npm)

MAL-2026-3581

Malicious code in @uipath/tool-workflowcompiler (npm)