Supply Chain Incidents

MAL-2026-11353

Malicious code in pullingpackagee (npm)

MAL-2026-11356

Malicious code in pullingpackageeeeeee (npm)

MAL-2026-11358

Malicious code in pullingpackageeeeeeeee (npm)

MAL-2026-11354

Malicious code in pullingpackageee (npm)

MAL-2026-11352

Malicious code in pullingpackaged (npm)

MAL-2026-11208

Malicious code in @dotconf-pro/dotconf-pro (npm)

MAL-2026-11209

Malicious code in @dotconf-pro/dotenv (npm)

MAL-2026-11375

Malicious code in rumjs (npm)

MAL-2026-11207

Malicious code in @404c3s4r/testxxx (npm)

MAL-2026-11390

Malicious code in svelte-metric-map (npm)

MAL-2026-11388

Malicious code in streak-metrics-math (npm)

MAL-2026-11391

Malicious code in svelte-streak-metric (npm)

MAL-2026-11387

Malicious code in streak-metrics-core (npm)

MAL-2026-11400

Malicious code in thedata (npm)

MAL-2026-11392

Malicious code in switchpaymentsapiserv-paypal (npm)

MAL-2026-11269

Malicious code in consumerweb-risk (npm)

MAL-2026-11198

Malicious code in mcp-search-server (PyPI)

MAL-2026-11197

Malicious code in ai-perf-toolkit (PyPI)

MAL-2026-11270

Malicious code in create-backend-scaffold (npm)

MAL-2026-11349

Malicious code in pretty-log-cli (npm)

MAL-2026-11328

Malicious code in logform-core (npm)

MAL-2026-11196

Malicious code in @wbnr/design (npm)

MAL-2026-11366

Malicious code in react-fast-refresh-helper (npm)

MAL-2026-11195

Malicious code in phabricator-client (PyPI)