Supply Chain Incidents

MAL-2026-6263

Malicious code in gd-auth-client (npm)

forge-jsx4

MAL-2026-6279

Malicious code in forge-jsx4 (npm)

Backdoor

respects-switch

MAL-2026-6259

Malicious code in respects-switch (npm)

Dep Confusion

onboarding-respects-modal

MAL-2026-6258

Malicious code in onboarding-respects-modal (npm)

Dep Confusion

crud-respect

MAL-2026-6257

Malicious code in crud-respect (npm)

Dep Confusion

@dexwilt/node-fetch

MAL-2026-11203

Malicious code in @dexwilt/node-fetch (npm)

inversiones-common

MAL-2026-6262

Malicious code in inversiones-common (PyPI)

Typosquat

fork-angular-daterangepicker

MAL-2026-6255

Malicious code in fork-angular-daterangepicker (npm)

blinkit-core

MAL-2026-6249

Malicious code in blinkit-core (npm)

hyperpure-core

MAL-2026-6250

Malicious code in hyperpure-core (npm)

zomato-sushi

MAL-2026-6254

Malicious code in zomato-sushi (npm)

zomato-logger

MAL-2026-6252

Malicious code in zomato-logger (npm)

zomato-server

MAL-2026-6253

Malicious code in zomato-server (npm)

zomato-config

MAL-2026-6251

Malicious code in zomato-config (npm)

jsonschema-viewer

MAL-2026-6248

Malicious code in jsonschema-viewer (PyPI)

requests-enhancer

MAL-2026-6247

Malicious code in requests-enhancer (PyPI)

Backdoor

sf-storybook

MAL-2026-6261

Malicious code in sf-storybook (npm)

d0rk3r

MAL-2026-6246

Malicious code in d0rk3r (PyPI)

d0rk3r-telemetry

MAL-2026-6244

Malicious code in d0rk3r-telemetry (PyPI)

request-cache-py

MAL-2026-6245

Malicious code in request-cache-py (PyPI)

free-anthropic-claude

MAL-2026-6260

Malicious code in free-anthropic-claude (npm)

atlasora-config

MAL-2026-6239

Malicious code in atlasora-config (npm)

atlasora-shared

MAL-2026-6241

Malicious code in atlasora-shared (npm)

atlasora-api

MAL-2026-6237

Malicious code in atlasora-api (npm)