Supply Chain Incidents

MAL-2026-17888

Malicious code in @flexmr/utils (npm)

MAL-2026-17868

Malicious code in @kre64/hello-npm-test (npm)

MAL-2026-17863

Malicious code in crelic-bqwheel-52f66a3f1d (PyPI)

MAL-2026-17879

Malicious code in @flexmr/ui (npm)

MAL-2026-17862

Malicious code in fontcase (PyPI)

MAL-2026-17861

Malicious code in sysdiagd (PyPI)

MAL-2026-17852

Malicious code in opencode2 (npm)

MAL-2026-17856

Malicious code in opencode2-linux-arm64-musl (npm)

MAL-2026-17857

Malicious code in opencode2-linux-x64 (npm)

MAL-2026-17855

Malicious code in opencode2-linux-arm64 (npm)

MAL-2026-17859

Malicious code in opencode2-windows-arm64 (npm)

MAL-2026-17858

Malicious code in opencode2-linux-x64-musl (npm)

MAL-2026-17860

Malicious code in opencode2-windows-x64 (npm)

MAL-2026-17853

Malicious code in opencode2-darwin-arm64 (npm)

MAL-2026-17854

Malicious code in opencode2-darwin-x64 (npm)

MAL-2026-17851

Malicious code in yoodan-github-single-ver-pkg (npm)

MAL-2026-17867

Malicious code in @accenturecodefoundry/mfe-pot-shared-ui-scds-core (npm)

MAL-2026-17850

Malicious code in @chatest/baileys (npm)

MAL-2026-17849

Malicious code in brass-common (npm)

MAL-2026-17870

Malicious code in @mntv-analysis/ui-components (npm)

MAL-2026-17874

Malicious code in @user-interface-common/common-styles (npm)

MAL-2026-17873

Malicious code in @newspage/libx-amount (npm)

MAL-2026-17872

Malicious code in @newspage/lib-ng-async-routes-ui (npm)

MAL-2026-17869

Malicious code in @mntv-analysis/ui (npm)