Supply Chain Incidents

MAL-2026-11052

Malicious code in app-data-layer (npm)

MAL-2026-11053

Malicious code in app-data-lts (npm)

MAL-2026-11049

Malicious code in mrmustard (PyPI)

MAL-2026-11046

Malicious code in intel-cicd-repo-infrastructure (PyPI)

MAL-2026-11048

Malicious code in karpatkit (PyPI)

MAL-2026-11047

Malicious code in karpatkey (PyPI)

MAL-2026-11045

Malicious code in subapp-pkg-util (npm)

MAL-2026-11041

Malicious code in @daylightqc/date-fmt-lite (npm)

MAL-2026-11034

Malicious code in eth-slint (npm)

MAL-2026-11031

Malicious code in govapkg (PyPI)

MAL-2026-11032

Malicious code in chai-as-stringify (npm)

MAL-2026-11039

Malicious code in yuinpm (npm)

MAL-2026-11033

Malicious code in eth-codergen (npm)

MAL-2026-11036

Malicious code in streak-lib-math (npm)

MAL-2026-11038

Malicious code in svelte-streak-metrics (npm)

MAL-2026-11035

Malicious code in streak-bucket-lib (npm)

MAL-2026-11037

Malicious code in svelte-goal-streak (npm)

MAL-2026-11027

Malicious code in fs-extra-core (npm)

MAL-2026-11030

Malicious code in vitest-axios (npm)

MAL-2026-11024

Malicious code in create-kumo-project (npm)

MAL-2026-11029

Malicious code in lychee-norm-cache (npm)

MAL-2026-11025

Malicious code in da-sc-sdk (npm)

MAL-2026-11028

Malicious code in helix-deploy (npm)

MAL-2026-11022

Malicious code in aio-commerce-lib-app (npm)