Supply Chain Incidents

MAL-2026-457

Malicious code in csv-parsing-xx (npm)

MAL-2026-450

Malicious code in sympy-dev (PyPI)

MAL-2026-448

Malicious code in rank253222 (npm)

MAL-2026-449

Malicious code in icloudprocessor (PyPI)

MAL-2026-447

Malicious code in ttam-ploy (PyPI)

MAL-2026-445

Malicious code in code-transfering-3 (PyPI)

MAL-2026-446

Malicious code in code-transfering-4 (PyPI)

MAL-2026-444

Malicious code in terminalbrush (PyPI)

MAL-2026-443

Malicious code in 1q847 (PyPI)

MAL-2026-442

Malicious code in xadauiom (PyPI)

MAL-2026-440

Malicious code in anduril-lattice-sdk-grpc-python (PyPI)

MAL-2026-441

Malicious code in spellcheckpy (PyPI)

MAL-2026-439

Malicious code in tv-admin-commons (npm)

MAL-2026-438

Malicious code in ts-tweetnacl-utils (npm)

MAL-2026-436

Malicious code in jquery-ajaxchimp (npm)

MAL-2026-437

Malicious code in lumo-api-client (npm)

MAL-2026-435

Malicious code in aligntype (npm)

MAL-2026-409

Malicious code in chai-async-test (npm)

MAL-2026-415

Malicious code in dotenv-expanded (npm)

MAL-2026-427

Malicious code in replicate-js (npm)

MAL-2026-434

Malicious code in weaviate-js (npm)

MAL-2026-426

Malicious code in qdrant-js (npm)

MAL-2026-407

Malicious code in babel-js (npm)

MAL-2026-418

Malicious code in nanoid-js (npm)