Supply Chain Incidents

MAL-2026-5820

Malicious code in node-scraper (PyPI)

MAL-2026-5810

Malicious code in dispatch-internal-plugins (PyPI)

MAL-2026-5816

Malicious code in llvm-aie (PyPI)

MAL-2026-5811

Malicious code in gigl-core (PyPI)

MAL-2026-5809

Malicious code in databricks-tools-core (PyPI)

MAL-2026-5818

Malicious code in mlir-aie (PyPI)

MAL-2026-5813

Malicious code in intel-ai-safety (PyPI)

MAL-2026-5823

Malicious code in sl-pgp (PyPI)

MAL-2026-5815

Malicious code in kinto-slack (PyPI)

MAL-2026-5819

Malicious code in mozautomation (PyPI)

MAL-2026-5822

Malicious code in scriptworker-client (PyPI)

MAL-2026-5821

Malicious code in pyptllm (PyPI)

MAL-2026-5799

Malicious code in boardflow (npm)

MAL-2026-5800

Malicious code in boardstep (npm)

MAL-2026-5807

Malicious code in sam-package (npm)

MAL-2026-5824

Malicious code in testpgagent (PyPI)

MAL-2026-5803

Malicious code in flow-lending (npm)

MAL-2026-5804

Malicious code in flow-lending-sdk (npm)

MAL-2026-5806

Malicious code in flowdefi (npm)

MAL-2026-5808

Malicious code in surf-lending (npm)

MAL-2026-5801

Malicious code in bodega-sdk (npm)

MAL-2026-5805

Malicious code in flowcardano (npm)

MAL-2026-5786

Malicious code in @solana-labs/ancor (npm)

MAL-2026-5787

Malicious code in @solana-labs/spl-toke (npm)