Supply Chain Incidents

MAL-2026-1996

Malicious code in puzzle-gateway (npm)

MAL-2026-1997

Malicious code in ty-web-session (npm)

MAL-2026-1989

Malicious code in init2winit (PyPI)

MAL-2026-1984

Malicious code in airio (PyPI)

MAL-2026-1991

Malicious code in nsscache (PyPI)

MAL-2026-1994

Malicious code in spatialmedia (PyPI)

MAL-2026-1993

Malicious code in pubsub2inbox (PyPI)

MAL-2026-1992

Malicious code in perfkitbenchmarker (PyPI)

MAL-2026-1987

Malicious code in composer-dev (PyPI)

MAL-2026-1988

Malicious code in dataflux-pytorch (PyPI)

MAL-2026-1990

Malicious code in mcp-transport-proto (PyPI)

MAL-2026-1986

Malicious code in cloud-datasets (PyPI)

MAL-2026-1985

Malicious code in azure-eventhub-checkpointstoretable (PyPI)

MAL-2026-1983

Malicious code in uipathisfun (npm)

MAL-2026-1975

Malicious code in chai-as-chayn (npm)

MAL-2026-1976

Malicious code in innocent-pkg (npm)

MAL-2026-1974

Malicious code in @fr3newera/baileys (npm)

MAL-2026-1981

Malicious code in xyzttt (npm)

MAL-2026-1982

Malicious code in xyztttxyz (npm)

MAL-2026-1980

Malicious code in svg-content-validation (npm)

MAL-2026-1977

Malicious code in json-bundling (npm)

MAL-2026-1978

Malicious code in json-specular (npm)

MAL-2026-1979

Malicious code in rollup-plugin-polyfill-utils (npm)

MAL-2026-1944

Malicious code in couplus-cli (npm)