Supply Chain Incidents

MAL-2026-10745

Malicious code in phantomx-tool-client (npm)

MAL-2026-10750

Malicious code in telemetry-metrics (npm)

MAL-2026-10730

Malicious code in codeam-cli (npm)

MAL-2026-10723

Malicious code in @yeaft/webchat-agent (npm)

MAL-2026-10725

Malicious code in agentto (npm)

MAL-2026-10746

Malicious code in sakuraai (npm)

MAL-2026-10757

Malicious code in dde-common (PyPI)

MAL-2026-10756

Malicious code in darkglitch (PyPI)

MAL-2026-10718

Malicious code in @sciagent/cli (npm)

MAL-2026-10753

Malicious code in a3s-code (PyPI)

MAL-2026-10755

Malicious code in captcha-solve-api (PyPI)

MAL-2026-10754

Malicious code in airflow-provider-spirit (PyPI)

MAL-2026-10747

Malicious code in sensorium-mcp (npm)

MAL-2026-10732

Malicious code in hehehe (npm)

MAL-2026-10717

Malicious code in @onescience/onecode (npm)

MAL-2026-10705

Malicious code in @agent-link/agent (npm)

MAL-2026-10722

Malicious code in @whalent/agent-core (npm)

MAL-2026-10741

Malicious code in netcontrol-agent (npm)

MAL-2026-10743

Malicious code in nordpass (npm)

MAL-2026-10759

Malicious code in ryry-cli (PyPI)

MAL-2026-10726

Malicious code in astro (npm)

MAL-2026-10720

Malicious code in @vibelet/cli (npm)

MAL-2026-10751

Malicious code in vanexa-agent (npm)

MAL-2026-10724

Malicious code in @yuandc/aica (npm)