Supply Chain Incidents

MAL-2026-4515

Malicious code in chai-val (npm)

MAL-2026-4564

Malicious code in finup-mongo-library (npm)

MAL-2026-4399

Malicious code in @kedem/okdb (npm)

MAL-2026-4366

Malicious code in @autoheal/setup (npm)

MAL-2026-4635

Malicious code in payment-account-input-selector (npm)

MAL-2026-4760

Malicious code in nvidia-nat-semantic-kernel (PyPI)

MAL-2026-4221

Malicious code in selfservsweeper (PyPI)

MAL-2026-4442

Malicious code in @shadowmd/libsignal-node (npm)

MAL-2026-4392

Malicious code in @hanssoft/baileys (npm)

MAL-2026-4580

Malicious code in http-uploader-dev (npm)

MAL-2026-4393

Malicious code in @hanssoft/libsignal-node (npm)

MAL-2026-4588

Malicious code in ionic-insta-api-wrapper (npm)

MAL-2026-4361

Malicious code in @amswf/huoke (npm)

MAL-2026-4373

Malicious code in @budetzz/libsignal-node (npm)

MAL-2026-4625

Malicious code in oh-langfuse (npm)

MAL-2026-4228

Malicious code in @tiledesk/tiledesk-server (npm)

MAL-2026-4458

Malicious code in @toni77777/aora (npm)

MAL-2026-4775

Malicious code in wdt-erpmcp (PyPI)

MAL-2026-4696

Malicious code in turing-sdk (npm)

MAL-2026-4490

Malicious code in auth0-templates-scripts-utils (npm)

MAL-2026-4489

Malicious code in auth0-templates-scripts (npm)

MAL-2026-4673

Malicious code in sparkecoder (npm)

MAL-2026-4472

Malicious code in @zhengshuo888/huoke (npm)

MAL-2026-4573

Malicious code in git-userhub (npm)