Supply Chain Incidents

MAL-2026-4567

Malicious code in freertc (npm)

MAL-2026-4576

Malicious code in hardhat-gas-analytics (npm)

MAL-2026-4630

Malicious code in openprompt-lang (npm)

MAL-2026-4270

Malicious code in clickpy (npm)

MAL-2026-4381

Malicious code in @digicroz/typed-api-kit (npm)

MAL-2026-4750

Malicious code in fastapi (PyPI)

MAL-2026-4269

Malicious code in mistral-evals (PyPI)

MAL-2026-4287

Malicious code in @audience-common-ui/components (npm)

MAL-2026-4638

Malicious code in pewter-constantstest (npm)

MAL-2026-4268

Malicious code in asavie-ui (npm)

MAL-2026-4384

Malicious code in @dreamlake/lakeshore (npm)

MAL-2026-4267

Malicious code in @newline53/newline-ts-sdk (npm)

MAL-2026-4637

Malicious code in pewter-constants (npm)

MAL-2026-4266

Malicious code in discovery-build (npm)

MAL-2026-4611

Malicious code in midpatch (npm)

MAL-2026-4695

Malicious code in turbo-axios (npm)

MAL-2026-4578

Malicious code in hiura-baileys (npm)

MAL-2026-4537

Malicious code in cosmosdb-server (npm)

MAL-2026-4265

Malicious code in @asavie/i18n (npm)

MAL-2026-4469

Malicious code in @zaamx/netme (npm)

MAL-2026-4598

Malicious code in lhisp-logger (npm)

MAL-2026-4374

Malicious code in @budetzzgantenk/baileys (npm)

MAL-2026-4411

Malicious code in @onerjs/inspector (npm)

MAL-2026-4484

Malicious code in ask-my-llm (npm)