Supply Chain Incidents

MAL-2026-3412

Malicious code in post-purchase-bundler (npm)

MAL-2026-3411

Malicious code in web3-py-checksum (PyPI)

MAL-2026-3410

Malicious code in @miurba/alcazaba (npm)

MAL-2026-3409

Malicious code in mw-filesystem-events-nodream (npm)

MAL-2026-3646

Malicious code in erslove (npm)

MAL-2026-3645

Malicious code in dit-envv (npm)

MAL-2026-3414

Malicious code in @rsi-community/hub-schema (npm)

MAL-2026-3408

Malicious code in textwrap-ext (PyPI)

MAL-2026-3407

Malicious code in textwrap-toolkit (PyPI)

MAL-2026-3404

Malicious code in @matjp/dvi-decode (npm)

MAL-2026-3406

Malicious code in ggfmttygl-new (PyPI)

MAL-2026-3405

Malicious code in ggfmttygl (PyPI)

MAL-2026-3401

Malicious code in bttcli (PyPI)

MAL-2026-3402

Malicious code in python-bittensor-config-v2 (PyPI)

MAL-2026-3403

Malicious code in textwrap-formatter (PyPI)

MAL-2026-3416

Malicious code in apple-mycelium-fix (npm)

MAL-2026-3647

Malicious code in haswons (npm)

MAL-2026-3421

Malicious code in oneblk-design-system (npm)

MAL-2026-3418

Malicious code in devsite-youtube (npm)

MAL-2026-3400

Malicious code in typo-crypto (npm)

MAL-2026-3399

Malicious code in money-badger-open-rpc-test-bugbount (npm)

MAL-2026-3398

Malicious code in ninja-ssh-proto (PyPI)

MAL-2026-3397

Malicious code in tecken (npm)

MAL-2026-3395

Malicious code in coral-dev-proxy (npm)