Supply Chain Incidents

MAL-2026-11202

Malicious code in ml-shared (PyPI)

MAL-2026-11281

Malicious code in dotenv-core (npm)

MAL-2026-11282

Malicious code in dotex-plugin (npm)

MAL-2026-11267

Malicious code in compose-logger-stand (npm)

MAL-2026-11350

Malicious code in pulleeelll (npm)

MAL-2026-11249

Malicious code in bn.js-4 (npm)

MAL-2026-11289

Malicious code in ember-cli-deploy-derploy (npm)

MAL-2026-11275

Malicious code in datdbs (npm)

MAL-2026-11402

Malicious code in time-to-reload (npm)

MAL-2026-11386

Malicious code in srgb-linear (npm)

MAL-2026-11406

Malicious code in unified-help-center-alpha (npm)

MAL-2026-11245

Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)

MAL-2026-11238

Malicious code in apihost (npm)

MAL-2026-11253

Malicious code in cancelling (npm)

MAL-2026-11324

Malicious code in js-focus-within (npm)

MAL-2026-11244

Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

MAL-2026-11291

Malicious code in ember-livereload-indicator (npm)

MAL-2026-11297

Malicious code in ethers-v6 (npm)

MAL-2026-11395

Malicious code in termly-namespace (npm)

MAL-2026-11411

Malicious code in xp-node-logger (npm)

MAL-2026-11285

Malicious code in easycommons (npm)

MAL-2026-11343

Malicious code in page_colors (npm)

MAL-2026-11290

Malicious code in ember-cli-deploy-secrets (npm)

MAL-2026-11326

Malicious code in live-reload-on-error (npm)