Supply Chain Incidents

MAL-2026-14364

Malicious code in 3-buildsight-web (npm)

MAL-2026-14366

Malicious code in 8-fetchsight-web (npm)

MAL-2026-14365

Malicious code in 6-viewsight-web (npm)

MAL-2026-14370

Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)

MAL-2026-14368

Malicious code in @syncraft-labs/react (npm)

MAL-2026-14372

Malicious code in create-coin (npm)

MAL-2026-14369

Malicious code in @syncraft-labs/vue (npm)

MAL-2026-14367

Malicious code in @syncraft-labs/core (npm)

MAL-2026-14371

Malicious code in chai-as-testkit (npm)

MAL-2026-14374

Malicious code in rust-testing-utils (npm)

MAL-2026-14375

Malicious code in solidity-testing-utils (npm)

MAL-2026-14373

Malicious code in hatdhat-testkit (npm)

MAL-2026-14378

Malicious code in stillm4ddpocs-rtest-bravo (npm)

MAL-2026-14376

Malicious code in stillm4ddpocs-demo-sprocket (npm)

MAL-2026-14377

Malicious code in stillm4ddpocs-rtest-alpha (npm)

MAL-2026-14379

Malicious code in totp-utils (npm)

MAL-2026-14580

Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

MAL-2026-14361

Malicious code in stillm4ddpocs-demo-gadget (npm)

MAL-2026-14360

Malicious code in stillm4ddpocs-demo-widget (npm)

MAL-2026-14359

Malicious code in internallib_v902 (npm)

GHSA-gf32-cmjh-8m9v

Duplicate Advisory: NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

MAL-2026-14358

Malicious code in scrambleeeer (PyPI)

MAL-2026-14357

Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

MAL-2026-14356

Malicious code in lumen-pages-community (npm)