Supply Chain Incidents

MAL-2026-2511

Malicious code in argon2-napi (npm)

MAL-2026-2509

Malicious code in @langgraphjs/toolkit (npm)

MAL-2026-2503

Malicious code in genesis-1p-tools-rpm-bundle (PyPI)

MAL-2026-2871

Malicious code in devkitx (npm)

MAL-2026-2502

Malicious code in databasenaps (PyPI)

MAL-2026-2501

Malicious code in databaselooks (PyPI)

MAL-2026-2525

Malicious code in frontend-backoffice (npm)

MAL-2026-2529

Malicious code in use-form-builder-plugin (npm)

MAL-2026-2524

Malicious code in a2a-chat-canvas (npm)

MAL-2026-2526

Malicious code in request-js-validator (npm)

MAL-2026-2499

Malicious code in nerite-security-audit (npm)

MAL-2026-2500

Malicious code in totally-safe-util (npm)

MAL-2026-2498

Malicious code in df-sandbox-test (npm)

MAL-2026-2497

Malicious code in commerce-utils (npm)

MAL-2026-2496

Malicious code in chess-sec-ssrf1 (npm)

MAL-2026-2495

Malicious code in cloudera (npm)

MAL-2026-2493

Malicious code in cloudera-poc (npm)

MAL-2026-2494

Malicious code in databasetapes (PyPI)

MAL-2026-2492

Malicious code in admin0911 (npm)

MAL-2026-2491

Malicious code in @not-nemo/crypto-tracker (npm)

MAL-2026-2716

Malicious code in @needl-ai/common (npm)

MAL-2026-2489

Malicious code in databaserobooms (PyPI)

MAL-2026-2490

Malicious code in databaserotacos (PyPI)

MAL-2026-2488

Malicious code in photo-extractor (PyPI)