Supply Chain Incidents

MAL-2026-13685

Malicious code in pytablute (PyPI)

MAL-2026-13684

Malicious code in @ssgw/icon (npm)

MAL-2026-13682

Malicious code in btcflx (PyPI)

MAL-2026-13681

Malicious code in btcflip (PyPI)

MAL-2026-13683

Malicious code in kotoraka (PyPI)

MAL-2026-13667

Malicious code in kotanku (PyPI)

MAL-2026-13666

Malicious code in cubesat-upstream-driver (PyPI)

MAL-2026-13665

Malicious code in riakcs (PyPI)

MAL-2026-13680

Malicious code in test-noexist-xyz-99 (npm)

MAL-2026-13671

Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)

MAL-2026-13675

Malicious code in statist-browser-typed-client-eventea.projects.tdevice (npm)

MAL-2026-13674

Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)

MAL-2026-13669

Malicious code in specials-resources-server (npm)

MAL-2026-13670

Malicious code in statist-browser-typed-client-eventea.projects.pwafamily (npm)

MAL-2026-13672

Malicious code in statist-browser-typed-client-eventea.projects.pwainsurance (npm)

MAL-2026-13673

Malicious code in statist-browser-typed-client-eventea.projects.pwakasko (npm)

MAL-2026-13677

Malicious code in svelte-kit-cache (npm)

MAL-2026-13679

Malicious code in svelte-streak-kit (npm)

MAL-2026-13629

Malicious code in @coralxyz/anchor (npm)

MAL-2026-13664

Malicious code in titan-exchange-shared-permissions (npm)

MAL-2026-13633

Malicious code in modern-localization (npm)

MAL-2026-13631

Malicious code in localization-fixer (npm)

MAL-2026-13630

Malicious code in @rbx-ts/services (npm)

MAL-2026-13632

Malicious code in map-streak-kit (npm)