Supply Chain Incidents

MAL-2026-13499

Malicious code in delivery-ci-codeceptjs-fork (npm)

MAL-2026-13505

Malicious code in dolyame-ui-iconloaderhoc (npm)

MAL-2026-13501

Malicious code in delivery-ci-jira-rnd (npm)

MAL-2026-13496

Malicious code in ded-pwa-c-cms (npm)

MAL-2026-13509

Malicious code in dolyame-ui-lazyrender (npm)

MAL-2026-13511

Malicious code in dolyame-ui-stateutils (npm)

MAL-2026-13502

Malicious code in devplatform-react-mcp (npm)

MAL-2026-13515

Malicious code in eacq-dialog (npm)

MAL-2026-13494

Malicious code in bigops-telephony-mock (npm)

MAL-2026-13497

Malicious code in ded-pwa-c-page-maker-props (npm)

MAL-2026-13514

Malicious code in eacq-core (npm)

MAL-2026-13503

Malicious code in distributorblock (npm)

MAL-2026-13519

Malicious code in streak-kit-map (npm)

MAL-2026-13495

Malicious code in blekit (npm)

MAL-2026-13518

Malicious code in postcss-theme-provider (npm)

MAL-2026-13516

Malicious code in forge-gas-diff (npm)

MAL-2026-13517

Malicious code in gas-diff-core (npm)

MAL-2026-13607

Malicious code in speed-hashes (PyPI)

MAL-2026-13490

Malicious code in fast-hashes (PyPI)

MAL-2026-13488

Malicious code in idnna (PyPI)

MAL-2026-13489

Malicious code in pydanticc (PyPI)

MAL-2026-13486

Malicious code in fastapii (PyPI)

MAL-2026-13487

Malicious code in flasq (PyPI)

MAL-2026-13493

Malicious code in velabuild (npm)