Supply Chain Incidents

MAL-2026-7452

Malicious code in cyberday26szymon-auth (PyPI)

MAL-2026-7453

Malicious code in cyberday26szymon-logging (PyPI)

MAL-2026-7451

Malicious code in vspropertypages (NuGet)

MAL-2026-7450

Malicious code in security_hacks (NuGet)

MAL-2026-7448

Malicious code in hackney.core.enums (NuGet)

MAL-2026-7449

Malicious code in hackney.core.jwt (NuGet)

MAL-2026-10655

Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)

MAL-2026-10656

Malicious code in @pimy-b2cweb/frontend-lib (npm)

MAL-2026-6911

Malicious code in @higherlogic/ocfe (npm)

MAL-2026-6908

Malicious code in express-deflect (npm)

MAL-2026-6907

Malicious code in chai-spycore (npm)

MAL-2026-6909

Malicious code in express-firegate (npm)

MAL-2026-6910

Malicious code in zluri-ad-connector (npm)

MAL-2026-6906

Malicious code in xnder-sdk-js (npm)

MAL-2026-6905

Malicious code in winston-prism (npm)

MAL-2026-6902

Malicious code in wime-zle (npm)

MAL-2026-6904

Malicious code in winston-js-express (npm)

MAL-2026-6901

Malicious code in vite-plugin-svg-paths (npm)

MAL-2026-6888

Malicious code in tailwindcss-animatecss-latest (npm)

MAL-2026-6890

Malicious code in tailwindcss-fonttypo-inter (npm)

MAL-2026-6903

Malicious code in windrule-utils (npm)

MAL-2026-6899

Malicious code in twcompose-utils (npm)

MAL-2026-6900

Malicious code in txs-data (npm)

MAL-2026-6871

Malicious code in renderctx (npm)