Supply Chain Incidents

MAL-2026-14566

Malicious code in veloq (npm)

MAL-2026-14561

Malicious code in module-relpath (npm)

MAL-2026-14564

Malicious code in sigcheck (npm)

MAL-2026-14554

Malicious code in decoris (PyPI)

MAL-2026-14556

Malicious code in sap-quarterly-report (PyPI)

MAL-2026-14555

Malicious code in ekx-report-utils (PyPI)

MAL-2026-14559

Malicious code in imo-allowlist-xss-poc (npm)

MAL-2026-14563

Malicious code in rn-push-provisioning (npm)

MAL-2026-14552

Malicious code in mathkitlite (PyPI)

MAL-2026-14553

Malicious code in @cortana-md/engine (npm)

MAL-2026-14551

Malicious code in bnotify-web-sdk (npm)

MAL-2026-14546

Malicious code in dumb-binding-gyp-package (npm)

MAL-2026-14550

Malicious code in tset_racie (npm)

MAL-2026-14548

Malicious code in shai_hulululud (npm)

MAL-2026-14547

Malicious code in grandfather_of_the_desert (npm)

MAL-2026-14549

Malicious code in the_tax_free_cashier_is_at_9f (npm)

MAL-2026-14545

Malicious code in pybitjs (PyPI)

MAL-2026-14542

Malicious code in trongridet (PyPI)

MAL-2026-14543

Malicious code in self-certificates (npm)

MAL-2026-14544

Malicious code in self-sign (npm)

MAL-2026-14541

Malicious code in svelte-vli-ui (npm)

MAL-2026-15606

Malicious code in m3fdfocdoewn (npm)

MAL-2026-15612

Malicious code in mndsxcusiwlk1 (npm)

MAL-2026-15609

Malicious code in mn2adskhweox (npm)