Supply Chain Incidents

MAL-2026-18099

Malicious code in formatting-subtitles-for-claude (npm)

MAL-2026-18098

Malicious code in security-research-startup-snapshot-810764b303 (PyPI)

MAL-2026-18097

Malicious code in research-probe-6150c1c915 (PyPI)

MAL-2026-18096

Malicious code in workalender (PyPI)

MAL-2026-18094

Malicious code in pafex (PyPI)

MAL-2026-18095

Malicious code in resion (PyPI)

MAL-2026-18093

Malicious code in workcalender (PyPI)

MAL-2026-18092

Malicious code in test-workalendar-internal (PyPI)

MAL-2026-18091

Malicious code in @platform-services/hrm-mfe-core (npm)

MAL-2026-18064

Malicious code in sc-announcer (npm)

MAL-2026-18063

Malicious code in fanarena-common (npm)

MAL-2026-18061

Malicious code in ccl-global-shopping (npm)

MAL-2026-18062

Malicious code in sc-wizard (npm)

MAL-2026-18051

Malicious code in @an1mshnpmb9c84920/stage-outer-m19s5 (npm)

MAL-2026-18046

Malicious code in @an1mshnpmb9c84920/gat-scope-target-125ec19a (npm)

MAL-2026-18050

Malicious code in @an1mshnpmb9c84920/stage-fn-m19p2 (npm)

MAL-2026-18049

Malicious code in @an1mshnpmb9c84920/pipe-dns-m19t2 (npm)

MAL-2026-18052

Malicious code in @an1mshnpmb9c84920/stage-repo-m19g7 (npm)

MAL-2026-18048

Malicious code in @an1mshnpmb9c84920/pipe-compat-m19r8 (npm)

MAL-2026-18047

Malicious code in @an1mshnpmb9c84920/oidc-cross-cafb9d929e (npm)

MAL-2026-18060

Malicious code in codex-setup (npm)

MAL-2026-18058

Malicious code in chatgpt-pro-setup-tool (npm)

MAL-2026-18054

Malicious code in @decoopus/claude-setup (npm)

MAL-2026-18056

Malicious code in chatgpt-desktop-setup (npm)