Supply Chain Incidents

MAL-2026-11040

Malicious code in react-tabulix-extended (npm)

dev-helper-bg

MAL-2026-10992

Malicious code in dev-helper-bg (PyPI)

make-helper

MAL-2026-10991

Malicious code in make-helper (PyPI)

streak-calendar

MAL-2026-10981

Malicious code in streak-calendar (npm)

streak-daycount

MAL-2026-10982

Malicious code in streak-daycount (npm)

svelte-streaks

MAL-2026-10983

Malicious code in svelte-streaks (npm)

@apexfdn/apex

MAL-2026-10979

Malicious code in @apexfdn/apex (npm)

comp-colors

MAL-2026-10986

Malicious code in comp-colors (PyPI)

nolby

MAL-2026-10980

Malicious code in nolby (npm)

veskra

MAL-2026-10984

Malicious code in veskra (npm)

react-tabulix-ui

MAL-2026-10988

Malicious code in react-tabulix-ui (npm)

animated-octo-spoon

MAL-2026-10985

Malicious code in animated-octo-spoon (PyPI)

react-tabulix-virtual

MAL-2026-10989

Malicious code in react-tabulix-virtual (npm)

react-tabulix-core

MAL-2026-10987

Malicious code in react-tabulix-core (npm)

reimagined-broccoli

MAL-2026-10978

Malicious code in reimagined-broccoli (PyPI)

lebinfmt

MAL-2026-10977

Malicious code in lebinfmt (PyPI)

Backdoor

colorstack

MAL-2026-10976

Malicious code in colorstack (PyPI)

rasterkit

MAL-2026-10974

Malicious code in rasterkit (PyPI)

Backdoor

rasterkit-demo

MAL-2026-10975

Malicious code in rasterkit-demo (PyPI)

Backdoor

fluffy-octo-broccoli

MAL-2026-10973

Malicious code in fluffy-octo-broccoli (PyPI)

commonweb-rewards

MAL-2026-10968

Malicious code in commonweb-rewards (npm)

consumerweb-calurls

MAL-2026-10970

Malicious code in consumerweb-calurls (npm)

commonweb-card

MAL-2026-10966

Malicious code in commonweb-card (npm)

commonweb-moneymovement

MAL-2026-10967

Malicious code in commonweb-moneymovement (npm)