Supply Chain Incidents

MAL-2026-238

Malicious code in paytmsiddlewaree (npm)

formater

PyPI

MAL-2026-237

Malicious code in formater (PyPI)

Typosquat

graponater

PyPI

MAL-2026-236

Malicious code in graponater (PyPI)

Typosquat

tailwindcss-animate-tool

MAL-2026-235

Malicious code in tailwindcss-animate-tool (npm)

express-sessions-id

MAL-2026-218

Malicious code in express-sessions-id (npm)

cors-base

MAL-2026-216

Malicious code in cors-base (npm)

passport-google-auth-token

MAL-2026-230

Malicious code in passport-google-auth-token (npm)

simple-string-utils3

MAL-2026-233

Malicious code in simple-string-utils3 (npm)

@maxcointech/simple-string-utils

MAL-2026-213

Malicious code in @maxcointech/simple-string-utils (npm)

jz-test-npm

MAL-2026-226

Malicious code in jz-test-npm (npm)

immer-js

MAL-2026-223

Malicious code in immer-js (npm)

luxon-js

MAL-2026-228

Malicious code in luxon-js (npm)

jsdom-js

MAL-2026-225

Malicious code in jsdom-js (npm)

framer-motion-js

MAL-2026-220

Malicious code in framer-motion-js (npm)

inquirer-js

MAL-2026-224

Malicious code in inquirer-js (npm)

react-hook-form-js

MAL-2026-232

Malicious code in react-hook-form-js (npm)

huggingface-js

MAL-2026-222

Malicious code in huggingface-js (npm)

llamaindex-js

MAL-2026-227

Malicious code in llamaindex-js (npm)

pinecone-js

MAL-2026-231

Malicious code in pinecone-js (npm)

milvus-js

MAL-2026-229

Malicious code in milvus-js (npm)

xml2js-js

MAL-2026-234

Malicious code in xml2js-js (npm)

firestore-types

MAL-2026-219

Malicious code in firestore-types (npm)

gradle-plugin

MAL-2026-221

Malicious code in gradle-plugin (npm)

analytics-browser

MAL-2026-214

Malicious code in analytics-browser (npm)