Supply Chain Incidents

MAL-2026-11227

Malicious code in @solana-sdk/web3.js (npm)

MAL-2026-11202

Malicious code in ml-shared (PyPI)

MAL-2026-11281

Malicious code in dotenv-core (npm)

MAL-2026-11282

Malicious code in dotex-plugin (npm)

MAL-2026-11267

Malicious code in compose-logger-stand (npm)

MAL-2026-11411

Malicious code in xp-node-logger (npm)

MAL-2026-11245

Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)

MAL-2026-11406

Malicious code in unified-help-center-alpha (npm)

MAL-2026-11285

Malicious code in easycommons (npm)

MAL-2026-11343

Malicious code in page_colors (npm)

MAL-2026-11250

Malicious code in bn.js-5 (npm)

MAL-2026-11244

Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

MAL-2026-11347

Malicious code in pjm-dls (npm)

MAL-2026-11266

Malicious code in columns_changed (npm)

MAL-2026-11326

Malicious code in live-reload-on-error (npm)

MAL-2026-11380

Malicious code in slowest-build-nodes (npm)

MAL-2026-11251

Malicious code in broccoli-watcher-siphon (npm)

MAL-2026-11402

Malicious code in time-to-reload (npm)

MAL-2026-11410

Malicious code in wistia_namespace (npm)

MAL-2026-11290

Malicious code in ember-cli-deploy-secrets (npm)

MAL-2026-11243

Malicious code in aven_shared (npm)

MAL-2026-11386

Malicious code in srgb-linear (npm)

MAL-2026-11395

Malicious code in termly-namespace (npm)

MAL-2026-11332

Malicious code in model-data-cache-service (npm)