Supply Chain Incidents

MAL-2026-2153

Malicious code in @xvortexsockets/baileys (npm)

MAL-2026-2148

Malicious code in mattermost-data-warehouse (PyPI)

MAL-2026-2150

Malicious code in snooty (PyPI)

MAL-2026-2149

Malicious code in sentry-filter-forks (PyPI)

MAL-2026-2147

Malicious code in mattermost-airflow (PyPI)

MAL-2026-2146

Malicious code in databricks-clean-room-orchestrator (PyPI)

MAL-2026-2145

Malicious code in compose-rl (PyPI)

MAL-2026-2152

Malicious code in target-iceberg (PyPI)

MAL-2026-2151

Malicious code in tap-wordpress (PyPI)

MAL-2026-2142

Malicious code in roboat-util (PyPI)

MAL-2026-2143

Malicious code in roboated (PyPI)

MAL-2026-2141

Malicious code in corexloader (PyPI)

MAL-2026-2140

Malicious code in coreloader (PyPI)

MAL-2026-2139

Malicious code in stats-helpers (PyPI)

MAL-2026-2138

Malicious code in open-vp-cal (PyPI)

GHSA-69fq-xp46-6x23

Trivy ecosystem supply chain was briefly compromised

MAL-2026-2398

Malicious code in xrpl-hooks-ide (npm)

MAL-2026-2397

Malicious code in wraith-module (npm)

MAL-2026-2396

Malicious code in voodoo-internal-api (npm)

MAL-2026-2395

Malicious code in uuidvalidatorarabis (npm)

MAL-2026-2394

Malicious code in typescript-mock-data (npm)

MAL-2026-2393

Malicious code in this-is-my-test-package (npm)

MAL-2026-2392

Malicious code in stormbreaker-shade (npm)

MAL-2026-2391

Malicious code in ssr-catalogue-sfcc (npm)