Supply Chain Incidents

MAL-2026-2501

Malicious code in databaselooks (PyPI)

MAL-2026-2525

Malicious code in frontend-backoffice (npm)

MAL-2026-2529

Malicious code in use-form-builder-plugin (npm)

MAL-2026-2524

Malicious code in a2a-chat-canvas (npm)

MAL-2026-2526

Malicious code in request-js-validator (npm)

MAL-2026-2499

Malicious code in nerite-security-audit (npm)

MAL-2026-2500

Malicious code in totally-safe-util (npm)

MAL-2026-2498

Malicious code in df-sandbox-test (npm)

MAL-2026-2497

Malicious code in commerce-utils (npm)

MAL-2026-2496

Malicious code in chess-sec-ssrf1 (npm)

MAL-2026-2495

Malicious code in cloudera (npm)

MAL-2026-2493

Malicious code in cloudera-poc (npm)

MAL-2026-2494

Malicious code in databasetapes (PyPI)

MAL-2026-2492

Malicious code in admin0911 (npm)

MAL-2026-2491

Malicious code in @not-nemo/crypto-tracker (npm)

MAL-2026-2716

Malicious code in @needl-ai/common (npm)

MAL-2026-2489

Malicious code in databaserobooms (PyPI)

MAL-2026-2490

Malicious code in databaserotacos (PyPI)

MAL-2026-2488

Malicious code in photo-extractor (PyPI)

MAL-2026-2487

Malicious code in discord-request (PyPI)

MAL-2026-2486

Malicious code in gangomodule (PyPI)

MAL-2026-2452

Malicious code in strapi-plugin-blurhash (npm)

MAL-2026-2450

Malicious code in strapi-plugin-advanced-uuid (npm)

MAL-2026-2463

Malicious code in strapi-plugin-guardarian-ext (npm)