Supply Chain Incidents

MAL-2026-4757

Malicious code in morin (PyPI)

MAL-2026-4742

Malicious code in aurapro-ui (PyPI)

MAL-2026-4177

Malicious code in did-0091 (npm)

MAL-2026-4741

Malicious code in aurafarmer (PyPI)

MAL-2026-4767

Malicious code in silly-logger (PyPI)

MAL-2026-4761

Malicious code in openirf (PyPI)

MAL-2026-4748

Malicious code in eplang (PyPI)

MAL-2026-4764

Malicious code in pycalendar-api (PyPI)

MAL-2026-4751

Malicious code in glass-of-water (PyPI)

MAL-2026-4758

Malicious code in nebulix-ai (PyPI)

MAL-2026-4766

Malicious code in saas-common-lib-473815 (PyPI)

MAL-2026-4745

Malicious code in clearml-truen-patch (PyPI)

MAL-2026-4740

Malicious code in zod-to-js (npm)

MAL-2026-4769

Malicious code in soundsource (PyPI)

MAL-2026-4743

Malicious code in buddyme (PyPI)

MAL-2026-4765

Malicious code in qontract-reconcile (PyPI)

MAL-2026-4746

Malicious code in crw (PyPI)

MAL-2026-4701

Malicious code in venturo-playwright-runner (npm)

MAL-2026-4175

Malicious code in collected-forms-embed-js (npm)

MAL-2026-4700

Malicious code in venturo-playwright (npm)

MAL-2026-4362

Malicious code in @arbocollab/arbo-web-people (npm)

MAL-2026-4383

Malicious code in @dknzo/soonex-ai (npm)

MAL-2026-4453

Malicious code in @tarojs/cli (npm)

MAL-2026-4531

Malicious code in clsx-js (npm)