Supply Chain Incidents

MAL-2026-2823

Malicious code in @genoma-ui/components (npm)

MAL-2026-2527

Malicious code in sjs-biginteger (npm)

MAL-2026-2528

Malicious code in sjs-lint-build1 (npm)

MAL-2026-2522

Malicious code in st-payment (PyPI)

MAL-2026-2521

Malicious code in gc-grocery-api (PyPI)

MAL-2026-2520

Malicious code in @signals-notebook/utils (npm)

MAL-2026-2866

Malicious code in @tableau__catalog-messages/database_lower (npm)

MAL-2026-2523

Malicious code in @telekom-wfa/auth-core (npm)

MAL-2026-2519

Malicious code in just4testlm (PyPI)

MAL-2026-2518

Malicious code in viewer-assets-generator (npm)

MAL-2026-2517

Malicious code in kraken-trader (PyPI)

MAL-2026-2870

Malicious code in black-moon-js (npm)

MAL-2026-2516

Malicious code in sentinel-tool (PyPI)

MAL-2026-2515

Malicious code in granulate-utils (PyPI)

MAL-2026-2514

Malicious code in gprofiler-logging (PyPI)

MAL-2026-2513

Malicious code in gprofiler (npm)

MAL-2026-2512

Malicious code in roboat-utils (PyPI)

MAL-2026-2506

Malicious code in @fairwords/encryption (npm)

MAL-2026-2507

Malicious code in @fairwords/loopback-connector-es (npm)

MAL-2026-2508

Malicious code in @fairwords/websocket (npm)

MAL-2026-2865

Malicious code in @sie-ppr-web-checkout/app (npm)

MAL-2026-2510

Malicious code in @velora-dex/sdk (npm)

MAL-2026-2504

Malicious code in strapi-plugin-cache (npm)

MAL-2026-2505

Malicious code in @aspect-security/argon2 (npm)