Supply Chain Incidents

MAL-2026-2033

Malicious code in @emilgroup/accounting-sdk (npm)

MAL-2026-2031

Malicious code in @emilgroup/account-sdk (npm)

MAL-2026-2067

Malicious code in babel-plugin-react-pure-component (npm)

MAL-2026-2030

Malicious code in @pypestream/floating-ui-dom (npm)

MAL-2026-2028

Malicious code in pipinpeace-bind (PyPI)

MAL-2026-2029

Malicious code in pipinpeace-reverse (PyPI)

MAL-2026-2027

Malicious code in opengov-k6-core (npm)

MAL-2026-2026

Malicious code in pipinpeace-env (PyPI)

MAL-2026-2025

Malicious code in remitly-blog (npm)

MAL-2026-2024

Malicious code in @mesh-helpers/themehelper (npm)

MAL-2026-2022

Malicious code in @mesh-components/card (npm)

MAL-2026-2023

Malicious code in @mesh-components/customthemeprovider (npm)

MAL-2026-2021

Malicious code in @mesh-helpers/common (npm)

MAL-2026-2018

Malicious code in @modals/blockchain (npm)

MAL-2026-2019

Malicious code in @modals/layout (npm)

MAL-2026-2020

Malicious code in aiolrucache (PyPI)

MAL-2026-2017

Malicious code in thisismytest (PyPI)

MAL-2026-2016

Malicious code in qyrm-pipinject4 (PyPI)

MAL-2026-2015

Malicious code in lingewindows (npm)

MAL-2026-2014

Malicious code in address-autocompletetest (npm)

MAL-2026-2013

Malicious code in nump (PyPI)

MAL-2026-2012

Malicious code in characterai-poc (npm)

MAL-2026-2011

Malicious code in cms-catalogue (npm)

MAL-2026-2010

Malicious code in yelp-react-component-badge (npm)