Supply Chain Incidents

MAL-2026-6140

Malicious code in @httpactions/strict-uri-encode (npm)

Typosquat

@httpactions/encode-url

MAL-2026-6139

Malicious code in @httpactions/encode-url (npm)

randpicker

PyPI

MAL-2026-6138

Malicious code in randpicker (PyPI)

Backdoor

@gbrlxvi/ts-project-lint

MAL-2026-6121

Malicious code in @gbrlxvi/ts-project-lint (npm)

react-error-lint

MAL-2026-6137

Malicious code in react-error-lint (npm)

ratelimitsucks

MAL-2026-6135

Malicious code in ratelimitsucks (npm)

Typosquat

ratelimitsucks6

MAL-2026-6136

Malicious code in ratelimitsucks6 (npm)

abuden221

MAL-2026-6130

Malicious code in abuden221 (npm)

abuden22

MAL-2026-6129

Malicious code in abuden22 (npm)

Typosquat

abuden218

MAL-2026-6128

Malicious code in abuden218 (npm)

panrouter-admin

MAL-2026-6134

Malicious code in panrouter-admin (npm)

panrouter

MAL-2026-6133

Malicious code in panrouter (npm)

@onum-releases/utils

MAL-2026-6127

Malicious code in @onum-releases/utils (npm)

@onum-releases/shared-components

MAL-2026-6126

Malicious code in @onum-releases/shared-components (npm)

@onum-releases/ixel

MAL-2026-6124

Malicious code in @onum-releases/ixel (npm)

@onum-releases/sdk

MAL-2026-6125

Malicious code in @onum-releases/sdk (npm)

@onum-releases/auth

MAL-2026-6123

Malicious code in @onum-releases/auth (npm)

@onum-releases/api-client

MAL-2026-6122

Malicious code in @onum-releases/api-client (npm)

@caspianph/storyteller

MAL-2026-6120

Malicious code in @caspianph/storyteller (npm)

computerrock-babel-preset-react-app

MAL-2026-6131

Malicious code in computerrock-babel-preset-react-app (npm)

metavu

MAL-2026-6132

Malicious code in metavu (npm)

parket-helper

MAL-2026-6119

Malicious code in parket-helper (npm)

final-poc-usa

RubyGems

MAL-2026-6118

Malicious code in final-poc-usa (RubyGems)

final-shoaib

RubyGems

MAL-2026-6117

Malicious code in final-shoaib (RubyGems)