Supply Chain Incidents

MAL-2026-5761

Malicious code in npm-sandbox-research-d7e8 (npm)

MAL-2026-5763

Malicious code in npm-sandbox-research-g3h4 (npm)

MAL-2026-5759

Malicious code in npm-sandbox-research-9c4e (npm)

MAL-2026-5764

Malicious code in sys-info-cli-app (npm)

MAL-2026-5756

Malicious code in easyaillm (PyPI)

MAL-2026-5755

Malicious code in anthropickit (PyPI)

MAL-2026-5753

Malicious code in @gbrlxvi/ts-form-utils (npm)

MAL-2026-5754

Malicious code in salesforce-sysutils-diagnostics (PyPI)

MAL-2026-5752

Malicious code in patientdocuments (npm)

MAL-2026-5750

Malicious code in mailconfirmer (npm)

MAL-2026-5749

Malicious code in easy-time666 (npm)

MAL-2026-5747

Malicious code in @giftyhq/widget-components (npm)

MAL-2026-5751

Malicious code in oh-my-ashclaw (npm)

MAL-2026-5748

Malicious code in chai-utils-test (npm)

MAL-2026-5741

Malicious code in @achuthvp/postinstall-poc (npm)

MAL-2026-5740

Malicious code in 2fa-exe (npm)

MAL-2026-5743

Malicious code in environment-gate (npm)

MAL-2026-5745

Malicious code in oa-crm-webapi (npm)

MAL-2026-5742

Malicious code in axl-ui (npm)

MAL-2026-5746

Malicious code in xy-shared (npm)

MAL-2026-5744

Malicious code in loadninja-shared (npm)

MAL-2026-5739

Malicious code in sheratan_haha (npm)

MAL-2026-5737

Malicious code in postcss-minify-selector-parser (npm)

MAL-2026-5738

Malicious code in postinstall-logger-7x9z (npm)