Supply Chain Incidents

MAL-2026-6261

Malicious code in sf-storybook (npm)

d0rk3r

MAL-2026-6246

Malicious code in d0rk3r (PyPI)

d0rk3r-telemetry

MAL-2026-6244

Malicious code in d0rk3r-telemetry (PyPI)

request-cache-py

MAL-2026-6245

Malicious code in request-cache-py (PyPI)

free-anthropic-claude

MAL-2026-6260

Malicious code in free-anthropic-claude (npm)

atlasora-config

MAL-2026-6239

Malicious code in atlasora-config (npm)

atlasora-shared

MAL-2026-6241

Malicious code in atlasora-shared (npm)

atlasora-api

MAL-2026-6237

Malicious code in atlasora-api (npm)

atlasora-types

MAL-2026-6242

Malicious code in atlasora-types (npm)

atlasora-utils

MAL-2026-6243

Malicious code in atlasora-utils (npm)

atlasora-sdk

MAL-2026-6240

Malicious code in atlasora-sdk (npm)

atlasora-client

MAL-2026-6238

Malicious code in atlasora-client (npm)

@withgoogle/stitch-sdk

MAL-2026-6256

Malicious code in @withgoogle/stitch-sdk (npm)

query-profile

MAL-2026-6236

Malicious code in query-profile (PyPI)

yian666aikf

MAL-2026-6234

Malicious code in yian666aikf (npm)

Backdoor

yianzzkf6687

MAL-2026-6235

Malicious code in yianzzkf6687 (npm)

Backdoor

fluent-dashboard-panel-metrics

MAL-2026-6233

Malicious code in fluent-dashboard-panel-metrics (PyPI)

improvado-layout-panel-metrics

MAL-2026-6231

Malicious code in improvado-layout-panel-metrics (PyPI)

django-auth-middleware-plus

MAL-2026-6230

Malicious code in django-auth-middleware-plus (PyPI)

free-claude

MAL-2026-6232

Malicious code in free-claude (npm)

base_parts_ai

MAL-2026-6228

Malicious code in base_parts_ai (npm)

routecraft

MAL-2026-6229

Malicious code in routecraft (npm)

aikaf668897

MAL-2026-6216

Malicious code in aikaf668897 (npm)

Backdoor

aikaf6688812

MAL-2026-6215

Malicious code in aikaf6688812 (npm)