Supply Chain Incidents

MAL-2026-1988

Malicious code in dataflux-pytorch (PyPI)

MAL-2026-1990

Malicious code in mcp-transport-proto (PyPI)

MAL-2026-1986

Malicious code in cloud-datasets (PyPI)

MAL-2026-1985

Malicious code in azure-eventhub-checkpointstoretable (PyPI)

MAL-2026-1983

Malicious code in uipathisfun (npm)

MAL-2026-1975

Malicious code in chai-as-chayn (npm)

MAL-2026-1976

Malicious code in innocent-pkg (npm)

MAL-2026-1974

Malicious code in @fr3newera/baileys (npm)

MAL-2026-1982

Malicious code in xyztttxyz (npm)

MAL-2026-1981

Malicious code in xyzttt (npm)

MAL-2026-1980

Malicious code in svg-content-validation (npm)

MAL-2026-1977

Malicious code in json-bundling (npm)

MAL-2026-1978

Malicious code in json-specular (npm)

MAL-2026-1979

Malicious code in rollup-plugin-polyfill-utils (npm)

MAL-2026-1944

Malicious code in couplus-cli (npm)

MAL-2026-1961

Malicious code in novi-cli (npm)

MAL-2026-1973

Malicious code in woltpickerapp (npm)

MAL-2026-1945

Malicious code in cryptopapi (npm)

MAL-2026-1953

Malicious code in kyxhiagent (npm)

MAL-2026-1950

Malicious code in hiagenttest (npm)

MAL-2026-1955

Malicious code in kyxserver-everything (npm)

MAL-2026-1954

Malicious code in kyxhiagent123 (npm)

MAL-2026-1948

Malicious code in fadlsjf (npm)

MAL-2026-1947

Malicious code in el-icon (npm)