Supply Chain Incidents

MAL-2026-2164

Malicious code in @rexxtheproject/elaina-libsignal (npm)

MAL-2026-2165

Malicious code in @rexxtheproject/keyed-db (npm)

MAL-2026-2163

Malicious code in @rexxtheproject/elaina-baileys (npm)

MAL-2026-2160

Malicious code in chai-as-chain (npm)

MAL-2026-2161

Malicious code in path-external (npm)

MAL-2026-2159

Malicious code in @eric-orderbuddyinfo/react-noval (npm)

MAL-2026-2162

Malicious code in svg-sizer-responsive (npm)

MAL-2026-2158

Malicious code in torchunmix (PyPI)

MAL-2026-2154

Malicious code in chai-as-emitted (npm)

MAL-2026-2155

Malicious code in pino-pretty-log (npm)

MAL-2026-2156

Malicious code in tailwind-animationbasis (npm)

MAL-2026-2157

Malicious code in transitive_lib (npm)

MAL-2026-2153

Malicious code in @xvortexsockets/baileys (npm)

MAL-2026-2148

Malicious code in mattermost-data-warehouse (PyPI)

MAL-2026-2150

Malicious code in snooty (PyPI)

MAL-2026-2149

Malicious code in sentry-filter-forks (PyPI)

MAL-2026-2147

Malicious code in mattermost-airflow (PyPI)

MAL-2026-2146

Malicious code in databricks-clean-room-orchestrator (PyPI)

MAL-2026-2145

Malicious code in compose-rl (PyPI)

MAL-2026-2152

Malicious code in target-iceberg (PyPI)

MAL-2026-2151

Malicious code in tap-wordpress (PyPI)

MAL-2026-2142

Malicious code in roboat-util (PyPI)

MAL-2026-2143

Malicious code in roboated (PyPI)

MAL-2026-2141

Malicious code in corexloader (PyPI)