Supply Chain Incidents

MAL-2026-2961

Malicious code in apple-internal-security-poc-frank (npm)

MAL-2026-2960

Malicious code in apple-auth-internal (npm)

MAL-2026-2957

Malicious code in cycode-dev (PyPI)

MAL-2026-2958

Malicious code in mysten_metrics (crates.io)

MAL-2026-2956

Malicious code in @serasa/core (npm)

MAL-2026-2952

Malicious code in @settle-sea/supporting-documents (npm)

MAL-2026-2954

Malicious code in bmg-web-features (npm)

MAL-2026-2953

Malicious code in bmg-web (npm)

MAL-2026-2955

Malicious code in megabank-worklist (npm)

MAL-2026-2959

Malicious code in internal_insights_enabled (npm)

MAL-2026-2951

Malicious code in hifromhere1 (npm)

MAL-2026-2950

Malicious code in tailwind-text-fill (npm)

MAL-2026-2949

Malicious code in pathjoin (PyPI)

MAL-2026-2948

Malicious code in leavemealone (PyPI)

MAL-2026-2946

Malicious code in moonbit-metrics-validator (PyPI)

MAL-2026-2947

Malicious code in moonbit-schema-utils (PyPI)

MAL-2026-2945

Malicious code in moonbit-locale-compat (PyPI)

MAL-2026-2938

Malicious code in bignum-ts-v2 (npm)

MAL-2026-2941

Malicious code in npm-doc-deploy (npm)

MAL-2026-2935

Malicious code in @tushar-br/desktop (npm)

MAL-2026-2937

Malicious code in @tushar-br/file11 (npm)

MAL-2026-2936

Malicious code in @tushar-br/editing-pack (npm)

MAL-2026-2939

Malicious code in krdfonts (npm)

MAL-2026-2934

Malicious code in @otaxayuns/baileys (npm)