Supply Chain Incidents

MAL-2026-2140

Malicious code in coreloader (PyPI)

MAL-2026-2139

Malicious code in stats-helpers (PyPI)

MAL-2026-2138

Malicious code in open-vp-cal (PyPI)

GHSA-69fq-xp46-6x23

Trivy ecosystem supply chain was briefly compromised

MAL-2026-2398

Malicious code in xrpl-hooks-ide (npm)

MAL-2026-2397

Malicious code in wraith-module (npm)

MAL-2026-2396

Malicious code in voodoo-internal-api (npm)

MAL-2026-2395

Malicious code in uuidvalidatorarabis (npm)

MAL-2026-2394

Malicious code in typescript-mock-data (npm)

MAL-2026-2393

Malicious code in this-is-my-test-package (npm)

MAL-2026-2392

Malicious code in stormbreaker-shade (npm)

MAL-2026-2391

Malicious code in ssr-catalogue-sfcc (npm)

MAL-2026-2390

Malicious code in ssh-common (npm)

MAL-2026-2389

Malicious code in spectral-module (npm)

MAL-2026-2388

Malicious code in spectral-engine (npm)

MAL-2026-2387

Malicious code in securefiles-common (npm)

MAL-2026-2386

Malicious code in react-native-forter (npm)

MAL-2026-2385

Malicious code in product-status (npm)

MAL-2026-2384

Malicious code in piyush_test_vadapav (npm)

MAL-2026-2383

Malicious code in phantom-module (npm)

MAL-2026-2382

Malicious code in osc-datagrid-validator (npm)

MAL-2026-2381

Malicious code in onb-enrichment (npm)

MAL-2026-2380

Malicious code in nodecognivault (npm)

MAL-2026-2379

Malicious code in node-neurograde (npm)