Supply Chain Incidents

MAL-2026-5425

Malicious code in @oplus/obus-web-sdk (npm)

MAL-2026-5426

Malicious code in @oplus/obus-web-sdk-plugin-recovery (npm)

MAL-2026-5424

Malicious code in @oplus/obus-core (npm)

MAL-2026-5457

Malicious code in tao-subnet-metrics (PyPI)

MAL-2026-5458

Malicious code in ultimate-ai-power (PyPI)

MAL-2026-5405

Malicious code in comos-sdk (npm)

MAL-2026-5404

Malicious code in cubifyanything (PyPI)

MAL-2026-5387

Malicious code in @0xlr/sentry-web (npm)

MAL-2026-5385

Malicious code in @0xlr/clerk-auth (npm)

MAL-2026-5386

Malicious code in @0xlr/prisma-client-js (npm)

MAL-2026-5391

Malicious code in @0xlr/vercel-analytics (npm)

MAL-2026-5389

Malicious code in @0xlr/stripe-frontend (npm)

MAL-2026-5388

Malicious code in @0xlr/stripe-checkout-js (npm)

MAL-2026-5406

Malicious code in ui-weave (npm)

MAL-2026-5390

Malicious code in @0xlr/supabase-db (npm)

MAL-2026-5399

Malicious code in kraken-ui (npm)

MAL-2026-5393

Malicious code in @sflyinc-knapsack/shutterfly-react (npm)

MAL-2026-5392

Malicious code in @open-banking/cabinet-providers (npm)

MAL-2026-5401

Malicious code in savant-listing (npm)

MAL-2026-5402

Malicious code in screenpipe-mcp-http (npm)

MAL-2026-5400

Malicious code in multica (npm)

MAL-2026-5397

Malicious code in create-docs-mcp (npm)

MAL-2026-5403

Malicious code in t-invest-mcp-server (npm)

MAL-2026-5396

Malicious code in @sqlite-node/createsql (npm)