Supply Chain Incidents

MAL-2026-10699

Malicious code in http-req-lite (npm)

MAL-2026-10695

Malicious code in ai-p2p (npm)

MAL-2026-10696

Malicious code in loader1 (npm)

MAL-2026-10697

Malicious code in websight-p2p (npm)

MAL-2026-10698

Malicious code in websight2-p2p (npm)

MAL-2026-10694

Malicious code in vor8zakon (npm)

MAL-2026-10693

Malicious code in claude-token-tracker-mcp (npm)

MAL-2026-10692

Malicious code in nyt-cms (npm)

MAL-2026-10766

Malicious code in syft-acp-uikit (npm)

MAL-2026-10762

Malicious code in @edgecommons/edgecommons (npm)

MAL-2026-10767

Malicious code in syft-acp-util (npm)

MAL-2026-10765

Malicious code in syft-acp-core (npm)

MAL-2026-10764

Malicious code in syft-acp-atoms (npm)

MAL-2026-10763

Malicious code in @edgecommons/streamlog-node (npm)

MAL-2026-10691

Malicious code in internallib_v907 (npm)

MAL-2026-10687

Malicious code in selparsecss-selector (npm)

MAL-2026-10690

Malicious code in qwen-asr-pvt (PyPI)

MAL-2026-10689

Malicious code in pylogora (PyPI)

MAL-2026-10688

Malicious code in log-guru (PyPI)

MAL-2026-10686

Malicious code in @ddh-libraries/analytics (npm)

MAL-2026-10684

Malicious code in react-hook-scripts (npm)

MAL-2026-10682

Malicious code in code-formatter-setup (npm)

MAL-2026-10683

Malicious code in formatters.ts (npm)

MAL-2026-10685

Malicious code in trongridweb (PyPI)