Supply Chain Incidents

MAL-2026-6560

Malicious code in tdata-grabber (PyPI)

MAL-2026-6559

Malicious code in lc-chatbot (npm)

MAL-2026-6558

Malicious code in fsociety-tools (PyPI)

MAL-2026-6556

Malicious code in polymarket-clob-math (npm)

MAL-2026-6555

Malicious code in livekit-agents (npm)

MAL-2026-6557

Malicious code in pkg-fallback (PyPI)

MAL-2026-6550

Malicious code in @k18n/creatormarketplace-admin-language (npm)

MAL-2026-6554

Malicious code in insomnia-test-util-m4gester (npm)

MAL-2026-6552

Malicious code in insomnia-plugin-poc-m4gester (npm)

MAL-2026-6553

Malicious code in insomnia-plugin-poc-m4gester2 (npm)

MAL-2026-6551

Malicious code in anthropic-internal-tools (npm)

MAL-2026-6549

Malicious code in discord-token-generator (PyPI)

MAL-2026-6548

Malicious code in ts-ankle (npm)

MAL-2026-6547

Malicious code in react-editable-calendar (npm)

MAL-2026-6546

Malicious code in ryan-pdf-js (npm)

MAL-2026-6545

Malicious code in crossmint-wallets-sdk (npm)

MAL-2026-6544

Malicious code in chai-as-persisted (npm)

MAL-2026-6542

Malicious code in @osmura/treeify (npm)

MAL-2026-6543

Malicious code in express-initial (npm)

MAL-2026-6539

Malicious code in db-query-log (npm)

MAL-2026-6540

Malicious code in db-rake (npm)

MAL-2026-6538

Malicious code in db-plog (npm)

MAL-2026-6541

Malicious code in pdf-converter-pro (PyPI)

MAL-2026-6536

Malicious code in @krentzen/buffer-reverse (npm)