Supply Chain Incidents

MAL-2026-1235

Malicious code in dakhara (PyPI)

MAL-2026-1226

Malicious code in qwery-core (PyPI)

MAL-2026-1224

Malicious code in spark-ml-utilities (PyPI)

MAL-2026-1223

Malicious code in risk-utilities (PyPI)

MAL-2026-1222

Malicious code in optimal-spark-config (PyPI)

MAL-2026-1225

Malicious code in urllib-slim (PyPI)

MAL-2026-1220

Malicious code in corp-build-utils-poc (npm)

MAL-2026-1221

Malicious code in xrpl-dev-portal (npm)

MAL-2026-1219

Malicious code in demo-pipelinetest (npm)

MAL-2026-1217

Malicious code in @vk-cloud-billing/common (npm)

MAL-2026-1218

Malicious code in chai-as-confirmed (npm)

MAL-2026-1227

Malicious code in gaia-marionette (npm)

MAL-2026-1216

Malicious code in pdfjs-dist-v5 (npm)

MAL-2026-1215

Malicious code in whop-sdk (npm)

MAL-2026-1206

Malicious code in polymarket-trade-bot-api (npm)

MAL-2026-1203

Malicious code in polmarket (npm)

MAL-2026-1192

Malicious code in chai-as-proofed (npm)

MAL-2026-1191

Malicious code in chai-as-mock (npm)

MAL-2026-1194

Malicious code in cmc-client (npm)

MAL-2026-1205

Malicious code in polymarket-provider (npm)

MAL-2026-1202

Malicious code in mvn-runtime (npm)

MAL-2026-1209

Malicious code in tailwindcss-form-bundler (npm)

MAL-2026-1188

Malicious code in alpha-replicator (npm)

MAL-2026-1208

Malicious code in tailwindcss-fonts-bundler (npm)