Supply Chain Incidents

MAL-2026-13419

Malicious code in @holocronlab/botruntime-runtime (npm)

MAL-2026-13420

Malicious code in @innocarpe/deepseek-build (npm)

MAL-2026-13423

Malicious code in fetchrtds (npm)

MAL-2026-13424

Malicious code in tailwindcss-hide-scrollbar (npm)

MAL-2026-13416

Malicious code in @bananacool467/ui-tools (npm)

MAL-2026-13418

Malicious code in @ccfly/setup-linux-x64 (npm)

MAL-2026-13417

Malicious code in @ccfly/setup-linux-arm64 (npm)

MAL-2026-13414

Malicious code in @atom8n/inspector (npm)

MAL-2026-13413

Malicious code in @astralcore/aura-wb (npm)

MAL-2026-13415

Malicious code in @aubea/mars (npm)

MAL-2026-13426

Malicious code in xayoub-xctxteam (PyPI)

MAL-2026-13410

Malicious code in @addai/entity-runtime (npm)

MAL-2026-13411

Malicious code in @addai/node (npm)

MAL-2026-13409

Malicious code in @addai/ainode (npm)

MAL-2026-13408

Malicious code in @activepieces/piece-base44 (npm)

MAL-2026-13407

Malicious code in @0l00000l/auth (npm)

MAL-2026-13406

Malicious code in 9remote (npm)

MAL-2026-13422

Malicious code in beautiful-ui-monitoring (npm)

MAL-2026-13421

Malicious code in @trackunit/iris-app-sdk-vite (npm)

MAL-2026-13412

Malicious code in @apicity/meta (npm)

MAL-2026-13425

Malicious code in typst-resume-cli (npm)

MAL-2026-13400

Malicious code in agenttunnels (npm)

MAL-2026-13394

Malicious code in @activepieces/piece-google-bigquery (npm)

MAL-2026-13395

Malicious code in @activepieces/piece-google-contacts (npm)