Supply Chain Incidents

MAL-2026-7462

Malicious code in pygremlinbox-malware-cryptomining-indicators (PyPI)

MAL-2026-7463

Malicious code in pygremlinbox-malware-install-execution (PyPI)

MAL-2026-7461

Malicious code in pygremlinbox-malware-credential-harvesting (PyPI)

MAL-2026-7460

Malicious code in pygremlinbox-malware-code-obfuscation (PyPI)

MAL-2026-7459

Malicious code in pygremlinbox-malware-c2-beacon (PyPI)

MAL-2026-7458

Malicious code in pycryptoshuffle (PyPI)

MAL-2026-7457

Malicious code in piirgg (PyPI)

MAL-2026-7456

Malicious code in notrandompacketname (PyPI)

MAL-2026-7455

Malicious code in myproject234 (PyPI)

MAL-2026-7454

Malicious code in cyberday26szymon-payments (PyPI)

MAL-2026-7452

Malicious code in cyberday26szymon-auth (PyPI)

MAL-2026-7453

Malicious code in cyberday26szymon-logging (PyPI)

MAL-2026-7451

Malicious code in vspropertypages (NuGet)

MAL-2026-7450

Malicious code in security_hacks (NuGet)

MAL-2026-7449

Malicious code in hackney.core.jwt (NuGet)

MAL-2026-7448

Malicious code in hackney.core.enums (NuGet)

MAL-2026-10655

Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)

MAL-2026-10656

Malicious code in @pimy-b2cweb/frontend-lib (npm)

MAL-2026-6911

Malicious code in @higherlogic/ocfe (npm)

MAL-2026-6909

Malicious code in express-firegate (npm)

MAL-2026-6907

Malicious code in chai-spycore (npm)

MAL-2026-6908

Malicious code in express-deflect (npm)

MAL-2026-6910

Malicious code in zluri-ad-connector (npm)

MAL-2026-6906

Malicious code in xnder-sdk-js (npm)