Supply Chain Incidents

MAL-2026-660

Malicious code in dns-troubleshoot-toolkit-xyz123 (npm)

MAL-2026-658

Malicious code in ansi-universal-ui (npm)

MAL-2026-669

Malicious code in vite-ui-components (npm)

MAL-2026-659

Malicious code in atg-atgse (npm)

MAL-2026-662

Malicious code in researchpoc (npm)

MAL-2026-657

Malicious code in react-dnd-legacy-html5-backend (npm)

MAL-2026-656

Malicious code in jshint-groups (npm)

MAL-2026-655

Malicious code in pipeline-poision-test (PyPI)

MAL-2026-651

Malicious code in cat-admin-tool (PyPI)

MAL-2026-652

Malicious code in chia-pool-reference (PyPI)

MAL-2026-653

Malicious code in credit-decision-metrics (PyPI)

MAL-2026-654

Malicious code in zabitog (PyPI)

MAL-2026-650

Malicious code in tableapy (PyPI)

MAL-2026-649

Malicious code in callapirequests (PyPI)

MAL-2026-646

Malicious code in picking-miniapp (npm)

MAL-2026-647

Malicious code in react-native-expofp (npm)

MAL-2026-644

Malicious code in dise-pkt (npm)

MAL-2026-643

Malicious code in @hemanshu_patil/xcode-windows-x64 (npm)

MAL-2026-642

Malicious code in @hemanshu_patil/xcode (npm)

MAL-2026-645

Malicious code in libsignal-yazxzpedia (npm)

MAL-2026-648

Malicious code in yazxzpedia (npm)

MAL-2026-641

Malicious code in connections-api-requests (PyPI)

MAL-2026-640

Malicious code in connections-api-request (PyPI)

MAL-2026-639

Malicious code in connection-api-requests (PyPI)