Supply Chain Incidents

MAL-2026-914

Malicious code in @qualys/react-web (npm)

MAL-2026-913

Malicious code in groq-ppe-pkg (PyPI)

MAL-2026-912

Malicious code in http-request-toolkit (PyPI)

MAL-2026-911

Malicious code in malpkgv2-0 (PyPI)

MAL-2026-910

Malicious code in dns-execution-test (PyPI)

MAL-2026-909

Malicious code in clawdist (PyPI)

MAL-2026-943

Malicious code in ethereums-lint (npm)

MAL-2026-942

Malicious code in ethereum-lint (npm)

MAL-2026-908

Malicious code in hops-preset-jest (npm)

MAL-2026-907

Malicious code in tronpad (PyPI)

MAL-2026-906

Malicious code in cucumber_json_schema (RubyGems)

MAL-2026-905

Malicious code in marshmellows (PyPI)

MAL-2026-904

Malicious code in strands-agents-anthropic (PyPI)

MAL-2026-903

Malicious code in requests-toolkit (PyPI)

MAL-2026-902

Malicious code in crc32fast (PyPI)

MAL-2026-900

Malicious code in cubaflixdownload (PyPI)

MAL-2026-901

Malicious code in platforms (PyPI)

MAL-2026-899

Malicious code in dzuseragents (PyPI)

MAL-2024-12375

Malicious code in langraph (PyPI)

MAL-2026-898

Malicious code in magicwolf (PyPI)

MAL-2026-897

Malicious code in clawdest (PyPI)

MAL-2026-896

Malicious code in sinon-web3-chain (npm)

MAL-2026-895

Malicious code in json-mapping-src (npm)

MAL-2026-894

Malicious code in troncloud (PyPI)