Supply Chain Incidents

MAL-2026-5337

Malicious code in solana-web3 (PyPI)

MAL-2026-5339

Malicious code in spl-token-py (PyPI)

MAL-2026-5335

Malicious code in xfoobar (PyPI)

MAL-2026-5334

Malicious code in spaysrbx (PyPI)

MAL-2026-5333

Malicious code in nerfstudio-gs (PyPI)

MAL-2026-5331

Malicious code in bittensor-burn (PyPI)

MAL-2026-5332

Malicious code in xforpy (PyPI)

MAL-2026-5367

Malicious code in odoo-addon-spp-base (PyPI)

MAL-2026-5330

Malicious code in bittensor-burn-alert (PyPI)

MAL-2026-5328

Malicious code in @zimmo/last_search (npm)

MAL-2026-5327

Malicious code in @listings/energy-labels (npm)

MAL-2026-5329

Malicious code in spaysdatarbx (PyPI)

MAL-2026-5365

Malicious code in quickwinston (npm)

MAL-2026-5312

Malicious code in bt-burn-watch (PyPI)

MAL-2026-5311

Malicious code in bittensor-burn-monitor (PyPI)

MAL-2026-5320

Malicious code in openai-mcp (PyPI)

MAL-2026-5326

Malicious code in tiktoken-mcp (PyPI)

MAL-2026-5307

Malicious code in classwind-utils (npm)

MAL-2026-5309

Malicious code in nodemon-lint (npm)

MAL-2026-5310

Malicious code in regexp-ts (npm)

MAL-2026-5306

Malicious code in chai-mocks (npm)

MAL-2026-5308

Malicious code in nodemon-copack (npm)

MAL-2026-5305

Malicious code in tlask (PyPI)

MAL-2026-5303

Malicious code in rlask (PyPI)