Supply Chain Incidents

MAL-2026-4389

Malicious code in @flipbit2-bb/test-auth-state (npm)

MAL-2026-4379

Malicious code in @deadcode09284814/axios-util (npm)

MAL-2026-4517

Malicious code in chalk-tempalte (npm)

MAL-2026-4528

Malicious code in cloud-pc-templates (npm)

MAL-2026-4557

Malicious code in ezymail (npm)

MAL-2026-4461

Malicious code in @venturo/playwright (npm)

MAL-2026-4651

Malicious code in pulse-axios (npm)

MAL-2026-4659

Malicious code in rdflib (npm)

MAL-2026-4180

Malicious code in stripe-utils (PyPI)

MAL-2026-4494

Malicious code in axois-utils (npm)

MAL-2026-4505

Malicious code in carvus-lens (npm)

MAL-2026-4643

Malicious code in polymarket-clob-client (npm)

MAL-2026-4443

Malicious code in @shinzepelly/libsignal-node (npm)

MAL-2026-4452

Malicious code in @tailwind-core/webpack (npm)

MAL-2026-4446

Malicious code in @solarcraft/observix (npm)

MAL-2026-4571

Malicious code in get-deps-path (npm)

MAL-2026-4559

Malicious code in fca-eryxenx (npm)

MAL-2026-4543

Malicious code in customerdigital-ui-containers-lib (npm)

MAL-2026-4532

Malicious code in code-tool-langfuse (npm)

MAL-2026-4579

Malicious code in hpsetup (npm)

MAL-2026-4591

Malicious code in jsonbson (npm)

MAL-2026-4407

Malicious code in @mcpassure/mcp-cnes (npm)

MAL-2026-4406

Malicious code in @mcpassure/mcp-anvisa-bulario (npm)

MAL-2026-4427

Malicious code in @rocketreach/rr-components (npm)