Supply Chain Incidents

MAL-2026-10761

Malicious code in my-tailwind-gutenberg-block (npm)

abseil-py

MAL-2026-10760

Malicious code in abseil-py (PyPI)

@ai-support-agent/cli

MAL-2026-10707

Malicious code in @ai-support-agent/cli (npm)

@aicommander/agent

MAL-2026-10708

Malicious code in @aicommander/agent (npm)

mfq-private-encoder

MAL-2026-10758

Malicious code in mfq-private-encoder (PyPI)

@cyberrant-rantai/rantai

MAL-2026-10709

Malicious code in @cyberrant-rantai/rantai (npm)

channel-worker

MAL-2026-10729

Malicious code in channel-worker (npm)

memtry-cli

MAL-2026-10736

Malicious code in memtry-cli (npm)

bvm-core

MAL-2026-10728

Malicious code in bvm-core (npm)

patchwork-os

MAL-2026-10744

Malicious code in patchwork-os (npm)

@whalent/agent

MAL-2026-10721

Malicious code in @whalent/agent (npm)

@agentvox/host

MAL-2026-10706

Malicious code in @agentvox/host (npm)

@thepayulink/server

MAL-2026-10719

Malicious code in @thepayulink/server (npm)

axios-test-one

MAL-2026-10727

Malicious code in axios-test-one (npm)

phantomx-tool-client

MAL-2026-10745

Malicious code in phantomx-tool-client (npm)

telemetry-metrics

MAL-2026-10750

Malicious code in telemetry-metrics (npm)

codeam-cli

MAL-2026-10730

Malicious code in codeam-cli (npm)

@yeaft/webchat-agent

MAL-2026-10723

Malicious code in @yeaft/webchat-agent (npm)

agentto

MAL-2026-10725

Malicious code in agentto (npm)

sakuraai

MAL-2026-10746

Malicious code in sakuraai (npm)

dde-common

MAL-2026-10757

Malicious code in dde-common (PyPI)

darkglitch

MAL-2026-10756

Malicious code in darkglitch (PyPI)

@sciagent/cli

MAL-2026-10718

Malicious code in @sciagent/cli (npm)

a3s-code

MAL-2026-10753

Malicious code in a3s-code (PyPI)