Supply Chain Incidents

MAL-2026-17204

Malicious code in @wbnr/design-kit (npm)

MAL-2026-17206

Malicious code in kalasnik-npm-simple-test (npm)

MAL-2026-17207

Malicious code in kjj81 (npm)

MAL-2026-17210

Malicious code in uuid-date (npm)

MAL-2026-17208

Malicious code in riot-private (npm)

MAL-2026-17211

Malicious code in vinzzsync-wacli (npm)

MAL-2026-17209

Malicious code in tanksync (npm)

MAL-2026-17202

Malicious code in @consts/links (npm)

MAL-2026-17203

Malicious code in @digi-kernel/digi-kernel-constrains (npm)

MAL-2026-17201

Malicious code in @bb1ptest23/test-paket (npm)

MAL-2026-17199

Malicious code in scrapetools2 (PyPI)

MAL-2026-17200

Malicious code in aseity (PyPI)

MAL-2026-17198

Malicious code in caracas4check (PyPI)

MAL-2026-17197

Malicious code in coinscan (PyPI)

MAL-2026-17195

Malicious code in claudedashbord (PyPI)

MAL-2026-17196

Malicious code in donutpromotion (PyPI)

MAL-2026-17194

Malicious code in metrics-sdk (PyPI)

MAL-2026-17193

Malicious code in metrio (PyPI)

MAL-2026-17192

Malicious code in donutautosellsrc (PyPI)

MAL-2026-17191

Malicious code in requests-cache-utils (PyPI)

MAL-2026-17189

Malicious code in chai-as-relay (npm)

MAL-2026-17190

Malicious code in cma-self-hosted-sandbox-cf (npm)

MAL-2026-17188

Malicious code in sherpy (PyPI)

MAL-2026-17187

Malicious code in @digift/cli (npm)