Supply Chain Incidents

MAL-2026-12009

Malicious code in @keyv/compress-brotli (npm)

MAL-2026-12011

Malicious code in @keyv/compress-lz4 (npm)

MAL-2026-12008

Malicious code in @keyv/cloudflare-kv (npm)

MAL-2026-12022

Malicious code in @keyv/serialize-superjson (npm)

MAL-2026-12024

Malicious code in @keyv/test-suite (npm)

MAL-2026-12007

Malicious code in @keyv/bigmap (npm)

MAL-2026-11928

Malicious code in @servicetitan/suppress-warnings (npm)

MAL-2026-11970

Malicious code in file-entry-cache (npm)

MAL-2026-11559

Malicious code in @cacheable/net (npm)

MAL-2026-11561

Malicious code in @cacheable/utils (npm)

MAL-2026-11558

Malicious code in @cacheable/memory (npm)

MAL-2026-11560

Malicious code in @cacheable/node-cache (npm)

MAL-2026-11966

Malicious code in ecto (npm)

MAL-2026-11963

Malicious code in cacheable (npm)

MAL-2026-11971

Malicious code in flat-cache (npm)

MAL-2026-11964

Malicious code in cacheable-request (npm)

MAL-2026-11521

Malicious code in psbt-helpers (PyPI)

MAL-2026-11519

Malicious code in launchdarkly-ai-server-sdk (PyPI)

MAL-2026-11520

Malicious code in psbt-utils (PyPI)

MAL-2026-11518

Malicious code in exnesss (npm)

MAL-2026-11516

Malicious code in coldcard-helpers (PyPI)

MAL-2026-11517

Malicious code in internallib_v688 (npm)

MAL-2026-11515

Malicious code in @zzzgenesis00/bip39-generator (npm)

MAL-2026-11512

Malicious code in internallib_v524 (npm)