Supply Chain Incidents

MAL-2026-17490

Malicious code in express-fork (npm)

MAL-2026-17489

Malicious code in express-enhanced (npm)

MAL-2026-17472

Malicious code in anthropic-sdk (PyPI)

MAL-2026-17630

Malicious code in virgil-cli (npm)

MAL-2026-17629

Malicious code in zencleaner (PyPI)

MAL-2026-17471

Malicious code in caoxiltts (PyPI)

MAL-2026-17469

Malicious code in infrabench (PyPI)

MAL-2026-17470

Malicious code in voxcpmruntime (PyPI)

MAL-2026-17468

Malicious code in voxcpmintel (PyPI)

MAL-2026-17465

Malicious code in voxcpmeval (PyPI)

MAL-2026-17466

Malicious code in voxcpmkit (PyPI)

MAL-2026-17467

Malicious code in voxcpmui4 (PyPI)

MAL-2026-17464

Malicious code in voxcpmui3 (PyPI)

MAL-2026-17462

Malicious code in echogen (PyPI)

MAL-2026-17463

Malicious code in voxcpmtts3 (PyPI)

MAL-2026-17461

Malicious code in voxel-tts (PyPI)

MAL-2026-17457

Malicious code in voxeval (PyPI)

MAL-2026-17459

Malicious code in ui-base-colors (npm)

MAL-2026-17460

Malicious code in ui.dist.min.js (npm)

MAL-2026-17458

Malicious code in translate-base-font (npm)

MAL-2026-17456

Malicious code in @smwebserver/static (npm)

MAL-2026-17455

Malicious code in dedh-devops-automation (PyPI)

MAL-2026-17426

Malicious code in kartykgithub-ph-f (npm)

MAL-2026-17425

Malicious code in kartykgithub-ph-e (npm)