Supply Chain Incidents

MAL-2026-4768

Malicious code in sklern (PyPI)

MAL-2026-4387

Malicious code in @euqns/nudge-mcp (npm)

MAL-2026-4572

Malicious code in get-package-lint (npm)

MAL-2026-4671

Malicious code in skipshot-agent (npm)

MAL-2026-4252

Malicious code in @43uh3ig43/telemetry-client (npm)

MAL-2026-4253

Malicious code in pylogft (PyPI)

MAL-2026-4604

Malicious code in lynx-keeper-cli (npm)

MAL-2026-4735

Malicious code in xy-ai-chat (npm)

MAL-2026-4653

Malicious code in qaq-core-util-v2 (npm)

MAL-2026-4497

Malicious code in bingocode (npm)

MAL-2026-4412

Malicious code in @onerjs/procedural-textures (npm)

MAL-2026-4385

Malicious code in @druids/ui (npm)

MAL-2026-4251

Malicious code in harmony-enablers-test-2026 (npm)

MAL-2026-4733

Malicious code in wrld-dev (npm)

MAL-2026-4363

Malicious code in @asura21232/fca-unofficial-nextgen (npm)

MAL-2026-4474

Malicious code in acc-document-editing (npm)

MAL-2026-4774

Malicious code in vulndify-mcp-server (PyPI)

MAL-2026-4444

Malicious code in @shwfed/nuxt (npm)

MAL-2026-4236

Malicious code in dependency-audit-tool (npm)

MAL-2026-4246

Malicious code in python-env-auditor (npm)

MAL-2026-4250

Malicious code in wallet-backup-verifier (npm)

MAL-2026-4232

Malicious code in build-integrity-verify (npm)

MAL-2026-4245

Malicious code in pypi-build-verifier (npm)

MAL-2026-4237

Malicious code in deploy-guard-check (npm)