Supply Chain Incidents

MAL-2026-4450

Malicious code in @tailwind-core/postcss (npm)

MAL-2026-4542

Malicious code in crypto-javascript (npm)

MAL-2026-4451

Malicious code in @tailwind-core/vite (npm)

MAL-2026-4602

Malicious code in lokal-mcp (npm)

MAL-2026-4694

Malicious code in tubebrain (npm)

MAL-2026-4693

Malicious code in to-cms (npm)

MAL-2026-4390

Malicious code in @flowselections/core (npm)

MAL-2026-4426

Malicious code in @riteshkumar04/stack-audit (npm)

MAL-2026-4606

Malicious code in martinez-polygon-clipping-tony (npm)

MAL-2026-4757

Malicious code in morin (PyPI)

MAL-2026-4742

Malicious code in aurapro-ui (PyPI)

MAL-2026-4177

Malicious code in did-0091 (npm)

MAL-2026-4741

Malicious code in aurafarmer (PyPI)

MAL-2026-4767

Malicious code in silly-logger (PyPI)

MAL-2026-4761

Malicious code in openirf (PyPI)

MAL-2026-4748

Malicious code in eplang (PyPI)

MAL-2026-4764

Malicious code in pycalendar-api (PyPI)

MAL-2026-4751

Malicious code in glass-of-water (PyPI)

MAL-2026-4758

Malicious code in nebulix-ai (PyPI)

MAL-2026-4766

Malicious code in saas-common-lib-473815 (PyPI)

MAL-2026-4745

Malicious code in clearml-truen-patch (PyPI)

MAL-2026-4740

Malicious code in zod-to-js (npm)

MAL-2026-4769

Malicious code in soundsource (PyPI)

MAL-2026-4743

Malicious code in buddyme (PyPI)