Supply Chain Incidents

MAL-2026-5858

Malicious code in metrics-pipeline-d8k2 (npm)

MAL-2026-5854

Malicious code in tailwind-typography-style (npm)

MAL-2026-5853

Malicious code in sp-api-dev-assistant-mcp-server (npm)

MAL-2026-5851

Malicious code in epm-service-module-v2 (npm)

MAL-2026-5855

Malicious code in vemos-sdk (npm)

MAL-2026-5852

Malicious code in richtext-editor-ui (npm)

MAL-2026-5847

Malicious code in reading-cookies (npm)

MAL-2026-5845

Malicious code in prettier_v1 (npm)

MAL-2026-5842

Malicious code in browserslist-db-sync (npm)

MAL-2026-5846

Malicious code in prettier_v2 (npm)

MAL-2026-5848

Malicious code in slow-surf (npm)

MAL-2026-5844

Malicious code in numdifftools (npm)

MAL-2026-5849

Malicious code in vite-configu-react (npm)

MAL-2026-5843

Malicious code in chai-smart-assert (npm)

MAL-2026-5850

Malicious code in vite-enhancer-config (npm)

MAL-2026-5840

Malicious code in testpackagemanyhttpsgo (PyPI)

MAL-2026-5841

Malicious code in twrap-toolkit (PyPI)

MAL-2026-5839

Malicious code in cipherflow (PyPI)

MAL-2026-5835

Malicious code in lab-helper (npm)

MAL-2026-5834

Malicious code in @wacrot/infra-data-kit (npm)

MAL-2026-5838

Malicious code in tn-advertisement (npm)

MAL-2026-5836

Malicious code in nic-datagov (npm)

MAL-2026-5837

Malicious code in postcss-minify-selector (npm)

MAL-2026-5833

Malicious code in yunxin-overmind-comment (npm)