Supply Chain Incidents

MAL-2026-5332

Malicious code in xforpy (PyPI)

MAL-2026-5367

Malicious code in odoo-addon-spp-base (PyPI)

MAL-2026-5330

Malicious code in bittensor-burn-alert (PyPI)

MAL-2026-5328

Malicious code in @zimmo/last_search (npm)

MAL-2026-5327

Malicious code in @listings/energy-labels (npm)

MAL-2026-5329

Malicious code in spaysdatarbx (PyPI)

MAL-2026-5365

Malicious code in quickwinston (npm)

MAL-2026-5312

Malicious code in bt-burn-watch (PyPI)

MAL-2026-5311

Malicious code in bittensor-burn-monitor (PyPI)

MAL-2026-5320

Malicious code in openai-mcp (PyPI)

MAL-2026-5326

Malicious code in tiktoken-mcp (PyPI)

MAL-2026-5307

Malicious code in classwind-utils (npm)

MAL-2026-5309

Malicious code in nodemon-lint (npm)

MAL-2026-5310

Malicious code in regexp-ts (npm)

MAL-2026-5306

Malicious code in chai-mocks (npm)

MAL-2026-5308

Malicious code in nodemon-copack (npm)

MAL-2026-5305

Malicious code in tlask (PyPI)

MAL-2026-5303

Malicious code in rlask (PyPI)

MAL-2026-5304

Malicious code in rsquests (PyPI)

MAL-2026-5302

Malicious code in nhmpy (PyPI)

MAL-2026-5366

Malicious code in zer0one-dnslog (npm)

MAL-2026-5342

Malicious code in kecak256 (npm)

MAL-2026-5343

Malicious code in progerss-cli (npm)

MAL-2026-5297

Malicious code in consumerweb-authflow (npm)