Supply Chain Incidents

MAL-2026-2832

Malicious code in ixosrestinterface (PyPI)

MAL-2026-2833

Malicious code in keystackutilities (PyPI)

MAL-2026-2834

Malicious code in loadcoremwassistant (PyPI)

MAL-2026-2836

Malicious code in restasv3 (PyPI)

MAL-2026-2828

Malicious code in express-security-policy (npm)

MAL-2026-2830

Malicious code in renovate-config-doctolib (npm)

MAL-2026-2829

Malicious code in paddle-internal-scripts (npm)

MAL-2026-2822

Malicious code in ing-web-v5 (npm)

MAL-2026-2821

Malicious code in robase-quick-install (PyPI)

MAL-2026-2820

Malicious code in chainutils (PyPI)

MAL-2026-2891

Malicious code in chai-as-init (npm)

MAL-2026-2895

Malicious code in chai-as-optimized (npm)

MAL-2026-2890

Malicious code in chai-as-ide (npm)

MAL-2026-2819

Malicious code in pynosist (PyPI)

MAL-2026-2818

Malicious code in genosys (PyPI)

MAL-2026-2817

Malicious code in lightweight-charts-4.1 (npm)

MAL-2026-2914

Malicious code in modern-events (npm)

MAL-2026-2702

Malicious code in emergentintegrations (PyPI)

MAL-2026-2701

Malicious code in sanitize-url (npm)

MAL-2026-2700

Malicious code in conventional-changelog-dash (npm)

MAL-2026-2815

Malicious code in monolith-twirp-pullsd-authorization (RubyGems)

MAL-2026-2816

Malicious code in monolith-twirp-pullsd-users (RubyGems)

MAL-2026-2814

Malicious code in gitlab-orchestrator (RubyGems)

MAL-2026-2812

Malicious code in requests-test-test44 (PyPI)