Supply Chain Incidents

MAL-2026-48

Malicious code in shop-state (npm)

MAL-2026-44

Malicious code in @airtel-web/legos (npm)

MAL-2026-45

Malicious code in @signify/vue-components (npm)

MAL-2026-43

Malicious code in published_at (npm)

MAL-2026-42

Malicious code in pyrogrom (PyPI)

MAL-2026-41

Malicious code in spire.officejs-document (npm)

MAL-2026-39

Malicious code in spire.officejs-common (npm)

MAL-2026-40

Malicious code in spire.officejs-editors (npm)

MAL-2026-35

Malicious code in aiihttp (PyPI)

MAL-2026-37

Malicious code in aoohttp (PyPI)

MAL-2026-38

Malicious code in auohttp (PyPI)

MAL-2026-36

Malicious code in aiohtto (PyPI)

MAL-2026-34

Malicious code in atm_bmw (npm)

MAL-2026-33

Malicious code in blobhunter-depconf-poc (PyPI)

MAL-2026-32

Malicious code in blobhunter-depconf-poc (npm)

MAL-2026-31

Malicious code in telstra (PyPI)

MAL-2026-30

Malicious code in dstny-utils (npm)

MAL-2026-29

Malicious code in ipvision-selfcare (npm)

MAL-2026-28

Malicious code in chrome-stealth (PyPI)

MAL-2026-27

Malicious code in qdatainstaller (PyPI)

MAL-2026-18

Malicious code in initializers (npm)

MAL-2026-20

Malicious code in kid-api (npm)

MAL-2026-24

Malicious code in tickncook-robot (npm)

MAL-2026-15

Malicious code in eslint-config-skynet (npm)