Supply Chain Incidents

MAL-2026-1007

Malicious code in dotenvx-ext (npm)

MAL-2026-1010

Malicious code in modify-setting (npm)

MAL-2026-1008

Malicious code in es1int-re1ease (npm)

MAL-2026-1009

Malicious code in express-soaps (npm)

MAL-2026-1012

Malicious code in ultimates-express (npm)

MAL-2026-1004

Malicious code in request-httpx-9 (PyPI)

MAL-2026-1040

Malicious code in react-markdown-canvas (npm)

MAL-2026-1002

Malicious code in newrubylogger (RubyGems)

MAL-2026-1003

Malicious code in cnnct-eaas-corre (PyPI)

MAL-2026-1001

Malicious code in request-httpx-4 (PyPI)

MAL-2026-1041

Malicious code in secure-monkey (npm)

MAL-2026-1000

Malicious code in scraper-npm (PyPI)

MAL-2026-999

Malicious code in react-dropzone-truffle (npm)

MAL-2026-997

Malicious code in npm-security-testing (npm)

MAL-2026-998

Malicious code in rbxm-tools (npm)

MAL-2026-986

Malicious code in en-thrift-internal (npm)

MAL-2026-985

Malicious code in conduit-utils (npm)

MAL-2026-994

Malicious code in vl-ui-code-preview (npm)

MAL-2026-995

Malicious code in vl-ui-contact-card (npm)

MAL-2026-988

Malicious code in vl-ui-action-group (npm)

MAL-2026-992

Malicious code in vl-ui-button (npm)

MAL-2026-991

Malicious code in vl-ui-breadcrumb (npm)

MAL-2026-990

Malicious code in vl-ui-body (npm)

MAL-2026-993

Malicious code in vl-ui-checkbox (npm)