Supply Chain Incidents

MAL-2026-2520

Malicious code in @signals-notebook/utils (npm)

MAL-2026-2866

Malicious code in @tableau__catalog-messages/database_lower (npm)

MAL-2026-2523

Malicious code in @telekom-wfa/auth-core (npm)

MAL-2026-2519

Malicious code in just4testlm (PyPI)

MAL-2026-2518

Malicious code in viewer-assets-generator (npm)

MAL-2026-2517

Malicious code in kraken-trader (PyPI)

MAL-2026-2870

Malicious code in black-moon-js (npm)

MAL-2026-2516

Malicious code in sentinel-tool (PyPI)

MAL-2026-2515

Malicious code in granulate-utils (PyPI)

MAL-2026-2514

Malicious code in gprofiler-logging (PyPI)

MAL-2026-2513

Malicious code in gprofiler (npm)

MAL-2026-2512

Malicious code in roboat-utils (PyPI)

MAL-2026-2506

Malicious code in @fairwords/encryption (npm)

MAL-2026-2507

Malicious code in @fairwords/loopback-connector-es (npm)

MAL-2026-2508

Malicious code in @fairwords/websocket (npm)

MAL-2026-2865

Malicious code in @sie-ppr-web-checkout/app (npm)

MAL-2026-2510

Malicious code in @velora-dex/sdk (npm)

MAL-2026-2504

Malicious code in strapi-plugin-cache (npm)

MAL-2026-2505

Malicious code in @aspect-security/argon2 (npm)

MAL-2026-2511

Malicious code in argon2-napi (npm)

MAL-2026-2509

Malicious code in @langgraphjs/toolkit (npm)

MAL-2026-2503

Malicious code in genesis-1p-tools-rpm-bundle (PyPI)

MAL-2026-2871

Malicious code in devkitx (npm)

MAL-2026-2502

Malicious code in databasenaps (PyPI)