Supply Chain Incidents

MAL-2026-11019

Malicious code in veskr (npm)

calmora

MAL-2026-11009

Malicious code in calmora (npm)

vantora

MAL-2026-11016

Malicious code in vantora (npm)

caldryn

MAL-2026-11008

Malicious code in caldryn (npm)

calvora

MAL-2026-11010

Malicious code in calvora (npm)

vectormark

MAL-2026-11017

Malicious code in vectormark (npm)

react-tabulix-query

MAL-2026-11015

Malicious code in react-tabulix-query (npm)

react-tabulix-extended

MAL-2026-11040

Malicious code in react-tabulix-extended (npm)

dev-helper-bg

MAL-2026-10992

Malicious code in dev-helper-bg (PyPI)

make-helper

MAL-2026-10991

Malicious code in make-helper (PyPI)

streak-calendar

MAL-2026-10981

Malicious code in streak-calendar (npm)

svelte-streaks

MAL-2026-10983

Malicious code in svelte-streaks (npm)

streak-daycount

MAL-2026-10982

Malicious code in streak-daycount (npm)

@apexfdn/apex

MAL-2026-10979

Malicious code in @apexfdn/apex (npm)

comp-colors

MAL-2026-10986

Malicious code in comp-colors (PyPI)

veskra

MAL-2026-10984

Malicious code in veskra (npm)

nolby

MAL-2026-10980

Malicious code in nolby (npm)

react-tabulix-ui

MAL-2026-10988

Malicious code in react-tabulix-ui (npm)

animated-octo-spoon

MAL-2026-10985

Malicious code in animated-octo-spoon (PyPI)

react-tabulix-virtual

MAL-2026-10989

Malicious code in react-tabulix-virtual (npm)

react-tabulix-core

MAL-2026-10987

Malicious code in react-tabulix-core (npm)

reimagined-broccoli

MAL-2026-10978

Malicious code in reimagined-broccoli (PyPI)

lebinfmt

MAL-2026-10977

Malicious code in lebinfmt (PyPI)

Backdoor

colorstack

MAL-2026-10976

Malicious code in colorstack (PyPI)