Supply Chain Incidents

MAL-2026-1245

Malicious code in nf-referral-backend-placeholder (npm)

MAL-2026-1244

Malicious code in spectral-corsair-navigator (npm)

MAL-2026-1243

Malicious code in nf-referral-backend (npm)

MAL-2026-1242

Malicious code in yaml-manifest-utils-mynarratorai (npm)

MAL-2026-1240

Malicious code in requests-ml-min (PyPI)

MAL-2026-1238

Malicious code in pearpass-lib-vault (npm)

MAL-2026-1239

Malicious code in pearpass-lib-vault-core (npm)

MAL-2026-1237

Malicious code in pearpass-lib-ui-theme-provider (npm)

MAL-2026-1241

Malicious code in @get-wrecked/overlay (npm)

MAL-2026-1236

Malicious code in @molb-prelogin/gobiz-config (npm)

MAL-2026-1235

Malicious code in dakhara (PyPI)

MAL-2026-1226

Malicious code in qwery-core (PyPI)

MAL-2026-1224

Malicious code in spark-ml-utilities (PyPI)

MAL-2026-1223

Malicious code in risk-utilities (PyPI)

MAL-2026-1222

Malicious code in optimal-spark-config (PyPI)

MAL-2026-1225

Malicious code in urllib-slim (PyPI)

MAL-2026-1220

Malicious code in corp-build-utils-poc (npm)

MAL-2026-1221

Malicious code in xrpl-dev-portal (npm)

MAL-2026-1219

Malicious code in demo-pipelinetest (npm)

MAL-2026-1217

Malicious code in @vk-cloud-billing/common (npm)

MAL-2026-1218

Malicious code in chai-as-confirmed (npm)

MAL-2026-1227

Malicious code in gaia-marionette (npm)

MAL-2026-1216

Malicious code in pdfjs-dist-v5 (npm)

MAL-2026-1215

Malicious code in whop-sdk (npm)