Supply Chain Incidents

MAL-2026-2925

Malicious code in cktool.internal (npm)

MAL-2026-2919

Malicious code in apple-idms-internal (npm)

MAL-2026-2918

Malicious code in apple-cloudkit-internal (npm)

MAL-2026-2853

Malicious code in react-hook-form (npm)

MAL-2026-2917

Malicious code in ac-sasskit-internal (npm)

MAL-2026-2926

Malicious code in material-ui-plugin-cache-endpoint (npm)

MAL-2026-2852

Malicious code in aet-test (PyPI)

MAL-2026-2851

Malicious code in @indriver-poc/whisperwind (npm)

MAL-2026-2850

Malicious code in value-slider (npm)

MAL-2026-2848

Malicious code in @than-xs/libsignal-node (npm)

MAL-2026-2849

Malicious code in @than1st/baileys (npm)

MAL-2026-2847

Malicious code in shan-lib (PyPI)

MAL-2026-2846

Malicious code in eslint-plugin-totara (npm)

MAL-2026-2845

Malicious code in node-red-contrib-yolo-object-detection (npm)

MAL-2026-2843

Malicious code in shan-lib-poc (PyPI)

MAL-2026-2841

Malicious code in lixxyly (PyPI)

MAL-2026-2844

Malicious code in shelipp (PyPI)

MAL-2026-2842

Malicious code in looopiw (PyPI)

MAL-2026-2840

Malicious code in sher-server-tool (PyPI)

MAL-2026-2839

Malicious code in sher-net (PyPI)

MAL-2026-2838

Malicious code in koa-v3 (npm)

MAL-2026-2837

Malicious code in solanakit (PyPI)

MAL-2026-2835

Malicious code in procoder (PyPI)

MAL-2026-2831

Malicious code in azure-ai-agentserver-githubcopilot (PyPI)