Supply Chain Incidents

MAL-2026-100

Malicious code in eslint-plugin-supertest (npm)

MAL-2026-98

Malicious code in py-publish-test-0126 (PyPI)

MAL-2026-99

Malicious code in testingpy (PyPI)

MAL-2026-97

Malicious code in robustinfer (PyPI)

MAL-2026-96

Malicious code in pycolorom (PyPI)

MAL-2026-88

Malicious code in evm-gateway-contracts-private (npm)

MAL-2026-85

Malicious code in elastic-docs-v3-utilities (npm)

MAL-2026-84

Malicious code in code-review-frontend (npm)

MAL-2026-95

Malicious code in x-clients-features (npm)

MAL-2026-90

Malicious code in matic-transfer-consumer (npm)

MAL-2026-89

Malicious code in importmap-polyfil (npm)

MAL-2026-93

Malicious code in okta-signin-widget (npm)

MAL-2026-86

Malicious code in electra-web-player (npm)

MAL-2026-92

Malicious code in okta-loginpage-render (npm)

MAL-2026-94

Malicious code in shopify-perf-kit (npm)

MAL-2026-91

Malicious code in okta-auth-js (npm)

MAL-2026-87

Malicious code in electra-web-player-event (npm)

MAL-2026-77

Malicious code in polymarket-clob (npm)

MAL-2026-75

Malicious code in ethos2.0 (npm)

MAL-2026-79

Malicious code in seanp-test-package-do-not-use2 (npm)

MAL-2026-72

Malicious code in bignumber.js-new (npm)

MAL-2026-76

Malicious code in open-telemetry-mini-client (npm)

MAL-2026-82

Malicious code in wikibuy-mobile (npm)

MAL-2026-74

Malicious code in cp_amm (npm)