Supply Chain Incidents

MAL-2026-4295

Malicious code in git-en-boite-inventory (npm)

MAL-2026-4296

Malicious code in mcp-dashboards-shared (npm)

MAL-2026-4294

Malicious code in flow-parser-oxidized (npm)

MAL-2026-4293

Malicious code in chai-as-float (npm)

MAL-2026-4292

Malicious code in chai-as-buffer (npm)

MAL-2026-4754

Malicious code in heims (PyPI)

MAL-2026-4423

Malicious code in @refactco/refact-os (npm)

MAL-2026-4679

Malicious code in system-user-identifier-cli (npm)

MAL-2026-4291

Malicious code in pylogkt (PyPI)

MAL-2026-4737

Malicious code in your-unique-package-name1 (npm)

MAL-2026-4623

Malicious code in npm-builderio-qwik-poc (npm)

MAL-2026-4473

Malicious code in @zizie071/libsignal-node (npm)

MAL-2026-4288

Malicious code in @jaggle/resizeobserves (npm)

MAL-2026-4289

Malicious code in @stockrepublic/republic-components (npm)

MAL-2026-4290

Malicious code in clipboard-guardian (npm)

MAL-2026-4669

Malicious code in shiroai (npm)

MAL-2026-4547

Malicious code in cxpher-linux-arm32 (npm)

MAL-2026-4285

Malicious code in polydata-analytics (PyPI)

MAL-2026-4286

Malicious code in polymarket-data-fetcher (PyPI)

MAL-2026-4678

Malicious code in sysnode (npm)

MAL-2026-4521

Malicious code in class-weaver (npm)

MAL-2026-4706

Malicious code in vite-plugin-css-blend (npm)

MAL-2026-4776

Malicious code in whatsfly-labfox (PyPI)

MAL-2026-4520

Malicious code in class-blend (npm)