Supply Chain Incidents

MAL-2026-3139

Malicious code in robase-start (PyPI)

MAL-2026-3138

Malicious code in robase-apis (PyPI)

MAL-2026-3135

Malicious code in sf-th-requests (PyPI)

MAL-2026-3136

Malicious code in timestamp-py (PyPI)

MAL-2026-3134

Malicious code in timemcp-py (PyPI)

MAL-2026-3133

Malicious code in fetchapi-syncdata-pypi (PyPI)

MAL-2026-3132

Malicious code in timemcp (PyPI)

MAL-2026-3140

Malicious code in fivem-monitor (npm)

MAL-2026-3131

Malicious code in kcvlib (PyPI)

MAL-2026-3130

Malicious code in genmedia-izumi-agent (PyPI)

MAL-2026-3129

Malicious code in supertag (crates.io)

MAL-2026-3128

Malicious code in wm-plugin-teach-me-widget (npm)

MAL-2026-3127

Malicious code in coloreasyprint (PyPI)

MAL-2026-3126

Malicious code in lsh (crates.io)

MAL-2026-3105

Malicious code in mypypipkg (PyPI)

MAL-2026-3123

Malicious code in apple-app-store-server-library-poc (npm)

MAL-2026-3104

Malicious code in robase-ui (PyPI)

MAL-2026-3122

Malicious code in @w3m-frame/session_update (npm)

MAL-2026-3103

Malicious code in amzn_codewhisperer_streaming_client (crates.io)

MAL-2026-3120

Malicious code in @pyme-web/web-api (npm)

MAL-2026-3119

Malicious code in @pyme-web/ui-widget (npm)

MAL-2026-3118

Malicious code in @pyme-web/ui-base (npm)

MAL-2026-3101

Malicious code in amzn_consolas_client (crates.io)

MAL-2026-3102

Malicious code in semantic_search_client (crates.io)