Supply Chain Incidents

MAL-2026-4789

Malicious code in ggk-happy (npm)

MAL-2026-4792

Malicious code in react-json-chalk (npm)

MAL-2026-4794

Malicious code in indextts-cli (PyPI)

MAL-2026-4791

Malicious code in react-cleaner (npm)

MAL-2026-4793

Malicious code in vxui-react (npm)

MAL-2026-4787

Malicious code in @autofleet/rabbit (npm)

MAL-2026-4788

Malicious code in @godscene/web (npm)

MAL-2026-4782

Malicious code in @catclaw/message-logger-plugin (npm)

MAL-2026-4784

Malicious code in react-ui-polyfills (npm)

MAL-2026-4783

Malicious code in @iola_adm/iola-cli (npm)

MAL-2026-4785

Malicious code in test-nonmal-pkg-5 (npm)

MAL-2026-4786

Malicious code in ranno (PyPI)

MAL-2026-4779

Malicious code in ether-bn.js (npm)

MAL-2026-4780

Malicious code in reasonix-plugmem (npm)

MAL-2026-4781

Malicious code in unique-id-64 (npm)

MAL-2026-4778

Malicious code in 1cat-tunnel-client-zx (npm)

MAL-2026-4357

Malicious code in helu (PyPI)

MAL-2026-4356

Malicious code in testing-on-npmjs (npm)

MAL-2026-4358

Malicious code in mistral-search-toolkit (PyPI)

MAL-2026-4355

Malicious code in mistral-workflows-plugins-webhook (PyPI)

MAL-2026-4354

Malicious code in mistral-workflows-plugins-mistralai (PyPI)

MAL-2026-4353

Malicious code in mistral-workflows (PyPI)

MAL-2026-4711

Malicious code in wao (npm)

MAL-2026-4720

Malicious code in weavedb-lite (npm)