Supply Chain Incidents

MAL-2026-16422

Malicious code in @httttt/mcp-npx-fetch-1 (npm)

MAL-2026-16421

Malicious code in kerokwis (PyPI)

MAL-2026-16420

Malicious code in kerokwis (RubyGems)

MAL-2026-16419

Malicious code in @gsutevil/hta-stage (npm)

MAL-2026-16418

Malicious code in n8n-nodes-data-transformer-utils (npm)

MAL-2026-16417

Malicious code in eslint-config-compact-utils (npm)

MAL-2026-16412

Malicious code in @tvg-mar/promos-context (npm)

MAL-2026-16413

Malicious code in @tvg-mar/promos-gtm (npm)

MAL-2026-16414

Malicious code in @tvg-mar/storyblok-bridge (npm)

MAL-2026-16416

Malicious code in @tvg-mar/utils (npm)

MAL-2026-16415

Malicious code in @tvg-mar/tvg-promos-atomic-ui (npm)

MAL-2026-16466

Malicious code in wurl_show_data (RubyGems)

MAL-2026-16411

Malicious code in no-fun (RubyGems)

MAL-2026-16410

Malicious code in auclean (PyPI)

MAL-2026-16409

Malicious code in ubiquiti-agents-link-mcp (npm)

MAL-2026-16408

Malicious code in snap-queue (PyPI)

MAL-2026-16407

Malicious code in poly-check-b (PyPI)

MAL-2026-16406

Malicious code in crypto-trader-py (PyPI)

MAL-2026-16405

Malicious code in tailwind-form-styles (npm)

MAL-2026-16394

Malicious code in envparse2 (npm)

MAL-2026-16393

Malicious code in envforge3 (npm)

MAL-2026-16403

Malicious code in node-env-buffer (npm)

MAL-2026-16395

Malicious code in envparse3 (npm)

MAL-2026-16392

Malicious code in envforge2 (npm)