Supply Chain Incidents

MAL-2026-5821

Malicious code in pyptllm (PyPI)

MAL-2026-5799

Malicious code in boardflow (npm)

MAL-2026-5800

Malicious code in boardstep (npm)

MAL-2026-5807

Malicious code in sam-package (npm)

MAL-2026-5824

Malicious code in testpgagent (PyPI)

MAL-2026-5803

Malicious code in flow-lending (npm)

MAL-2026-5804

Malicious code in flow-lending-sdk (npm)

MAL-2026-5806

Malicious code in flowdefi (npm)

MAL-2026-5808

Malicious code in surf-lending (npm)

MAL-2026-5801

Malicious code in bodega-sdk (npm)

MAL-2026-5805

Malicious code in flowcardano (npm)

MAL-2026-5786

Malicious code in @solana-labs/ancor (npm)

MAL-2026-5787

Malicious code in @solana-labs/spl-toke (npm)

MAL-2026-5788

Malicious code in @solana-labs/web3js (npm)

MAL-2026-5789

Malicious code in claude-cup (npm)

MAL-2026-5791

Malicious code in mddriver (npm)

MAL-2026-5797

Malicious code in neurodrift (PyPI)

MAL-2026-5794

Malicious code in neural-network-scan (npm)

MAL-2026-5796

Malicious code in llmfree (PyPI)

MAL-2026-5795

Malicious code in gptminifast (PyPI)

MAL-2026-5792

Malicious code in nativescript-swisspost-imagepicker (npm)

MAL-2026-5793

Malicious code in nativescript-swisspost-pcc-creative-editor (npm)

MAL-2026-5790

Malicious code in ldpbootstrap-jquery (npm)

MAL-2026-5777

Malicious code in field-plus (npm)