Supply Chain Incidents

MAL-2026-6738

Malicious code in @jacobtan/decode-sdk (npm)

MAL-2026-6737

Malicious code in epic-internal-tools (npm)

MAL-2026-6734

Malicious code in horde-python-client (PyPI)

MAL-2026-6733

Malicious code in epic-build-scripts (PyPI)

MAL-2026-6735

Malicious code in ue-python-tools (PyPI)

MAL-2026-6736

Malicious code in unreal-mladapter (PyPI)

MAL-2026-6730

Malicious code in ue-automation-scripts (npm)

MAL-2026-6729

Malicious code in robomerge (npm)

MAL-2026-6732

Malicious code in unreal-horde-dashboard (npm)

MAL-2026-6731

Malicious code in ue-jenkins-buildkite (npm)

MAL-2026-6789

Malicious code in @checkrhq/adjudication-api-client (npm)

MAL-2026-6728

Malicious code in dt-validator (PyPI)

MAL-2026-6727

Malicious code in tailwind-animates (npm)

MAL-2026-6726

Malicious code in db-convertor (npm)

MAL-2026-6725

Malicious code in @modhamanish/rn-mm-template (npm)

MAL-2026-6780

Malicious code in @marketfront/footer (npm)

MAL-2026-6771

Malicious code in @marketfront/commonecommerce (npm)

MAL-2026-6782

Malicious code in @marketfront/header (npm)

MAL-2026-6766

Malicious code in @marketfront/baobabtech (npm)

MAL-2026-6770

Malicious code in @marketfront/changefilter (npm)

MAL-2026-6786

Malicious code in @marketfront/mychatspreloader (npm)

MAL-2026-6785

Malicious code in @marketfront/madvpopup (npm)

MAL-2026-6775

Malicious code in @marketfront/digitalherobannercarousel (npm)

MAL-2026-6787

Malicious code in @marketfront/navbar (npm)