Supply Chain Incidents

MAL-2026-10106

Malicious code in rallycoding (npm)

MAL-2026-10099

Malicious code in polipoli-pak (npm)

MAL-2026-10097

Malicious code in @kl-starfish/test-01 (npm)

MAL-2026-10100

Malicious code in proxy-check-i (PyPI)

MAL-2026-10098

Malicious code in fastify-addone (npm)

MAL-2026-10096

Malicious code in guest-app-ui (npm)

MAL-2026-10095

Malicious code in fury_frontend-andes-ui (npm)

MAL-2026-10094

Malicious code in @equansservices/setup (npm)

MAL-2026-10093

Malicious code in @andrewstory18/is-real-odd (npm)

MAL-2026-10092

Malicious code in vite-pwa-config (npm)

MAL-2026-10091

Malicious code in qlinforge (PyPI)

MAL-2026-10086

Malicious code in dl-pp-latm (npm)

MAL-2026-10089

Malicious code in neon-poly-utls (npm)

MAL-2026-10082

Malicious code in chain-async-dom (npm)

MAL-2026-10083

Malicious code in clob-math-v2 (npm)

MAL-2026-10084

Malicious code in conversionvaluemanager (npm)

MAL-2026-10088

Malicious code in lovable-tager (npm)

MAL-2026-10087

Malicious code in eslint-plus (npm)

MAL-2026-10090

Malicious code in nonenull1 (npm)

MAL-2026-10085

Malicious code in dependency_confusions (npm)

MAL-2026-10058

Malicious code in cookie-js-ease (npm)

MAL-2026-10059

Malicious code in cookie-parser-es (npm)

MAL-2026-10060

Malicious code in cookie-parser-js (npm)

MAL-2026-10064

Malicious code in multer-orm (npm)