Supply Chain Incidents

MAL-2026-3463

Malicious code in @tanstack/history (npm)

MAL-2026-3462

Malicious code in @tanstack/eslint-plugin-start (npm)

MAL-2026-3461

Malicious code in @tanstack/eslint-plugin-router (npm)

MAL-2026-3460

Malicious code in @tanstack/arktype-adapter (npm)

MAL-2026-3432

Malicious code in @mistralai/mistralai (npm)

MAL-2026-3431

Malicious code in apkeep (PyPI)

MAL-2026-3430

Malicious code in cplace-bmw-emt-mvp (npm)

MAL-2026-3429

Malicious code in openai-spellchecker (PyPI)

MAL-2026-3508

Malicious code in crypto-javascri (npm)

MAL-2026-3506

Malicious code in @mimecast-ui/charts (npm)

MAL-2026-3507

Malicious code in @mimecast-ui/components (npm)

MAL-2026-3427

Malicious code in @cplace-workflow-fe/cf-workflow (npm)

MAL-2026-3428

Malicious code in xxx-bale (PyPI)

GHSA-m5p4-gvpx-4mvr

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

MAL-2026-3509

Malicious code in pp-react-v5 (npm)

MAL-2026-3426

Malicious code in mpkg123 (PyPI)

MAL-2026-3425

Malicious code in xxoo-bale (PyPI)

MAL-2026-3423

Malicious code in byvendors (npm)

MAL-2026-3424

Malicious code in dlocal-cli (PyPI)

MAL-2026-3639

Malicious code in briantreehttp (npm)

MAL-2026-3415

Malicious code in ac-sasskit (npm)

MAL-2026-3413

Malicious code in django-b64-img (PyPI)

MAL-2026-3422

Malicious code in rsflows-pexml (npm)

MAL-2026-3420

Malicious code in noon-contracts (npm)