Supply Chain Incidents

goodoldtoulas

PyPI

MAL-2026-5271

Malicious code in goodoldtoulas (PyPI)

reactvora

MAL-2026-5270

Malicious code in reactvora (npm)

glyphr

MAL-2026-5269

Malicious code in glyphr (npm)

ulid-os

MAL-2026-5268

Malicious code in ulid-os (npm)

awaitly-visualizer

MAL-2026-5239

Malicious code in awaitly-visualizer (npm)

autotel-subscribers

MAL-2026-5230

Malicious code in autotel-subscribers (npm)

@ethlete/types

MAL-2026-5204

Malicious code in @ethlete/types (npm)

@forjacms/sections

MAL-2026-5207

Malicious code in @forjacms/sections (npm)

node-env-resolver-dotenvx

MAL-2026-5264

Malicious code in node-env-resolver-dotenvx (npm)

executable-stories-init

MAL-2026-5253

Malicious code in executable-stories-init (npm)

node-env-resolver-nextjs

MAL-2026-5265

Malicious code in node-env-resolver-nextjs (npm)

discord-search

MAL-2026-5244

Malicious code in discord-search (npm)

autotel-playwright

MAL-2026-5227

Malicious code in autotel-playwright (npm)

creditcard.js

MAL-2026-5242

Malicious code in creditcard.js (npm)

autotel-mcp

MAL-2026-5223

Malicious code in autotel-mcp (npm)

autotel-web

MAL-2026-5233

Malicious code in autotel-web (npm)

node-env-resolver-aws

MAL-2026-5263

Malicious code in node-env-resolver-aws (npm)

autotel-aws

MAL-2026-5214

Malicious code in autotel-aws (npm)

awaitly-mongo

MAL-2026-5237

Malicious code in awaitly-mongo (npm)

@ethlete/cli

MAL-2026-5197

Malicious code in @ethlete/cli (npm)

eslint-plugin-awaitly

MAL-2026-5246

Malicious code in eslint-plugin-awaitly (npm)

eslint-plugin-executable-stories-playwright

MAL-2026-5248

Malicious code in eslint-plugin-executable-stories-playwright (npm)

awaitly

MAL-2026-5234

Malicious code in awaitly (npm)