Supply Chain Incidents

MAL-2026-2238

Malicious code in spr-i18n-labels (npm)

MAL-2026-2239

Malicious code in chaostoolkit-turbulence (PyPI)

MAL-2026-2240

Malicious code in magtape (PyPI)

MAL-2026-2241

Malicious code in pacbot (PyPI)

MAL-2026-2237

Malicious code in jsonify-builder (npm)

MAL-2026-2236

Malicious code in onboarding-server (npm)

MAL-2026-2235

Malicious code in srcsrctest (npm)

MAL-2026-2234

Malicious code in security-install-analytics (npm)

MAL-2026-2233

Malicious code in lightmock (PyPI)

MAL-2026-2229

Malicious code in @zecho/libsignal (npm)

MAL-2026-2228

Malicious code in @zecho/baileys-mod (npm)

MAL-2026-2221

Malicious code in @validator-lut-sdk/v3 (npm)

MAL-2026-2218

Malicious code in @solana-ipfs/sdk (npm)

MAL-2026-2216

Malicious code in @pumpfun-ipfs/sdk (npm)

MAL-2026-2225

Malicious code in neanderthal-validator (npm)

MAL-2026-2224

Malicious code in jito-validator-sdk (npm)

MAL-2026-2227

Malicious code in validator-lut-sdk (npm)

MAL-2026-2219

Malicious code in @solmasterv3/solana-metadata-sdk (npm)

MAL-2026-2226

Malicious code in node-coremesh (npm)

MAL-2026-2222

Malicious code in chain-coremesh (npm)

MAL-2026-2204

Malicious code in @emilgroup/numbergenerator-sdk-node (npm)

MAL-2026-2214

Malicious code in react-autolink-text (npm)

MAL-2026-2207

Malicious code in @emilgroup/process-manager-sdk-node (npm)

MAL-2026-2212

Malicious code in @opengov/qa-record-types-api (npm)