Supply Chain Incidents

MAL-2026-5143

Malicious code in @redhat-cloud-services/javascript-clients-shared (npm)

MAL-2026-5139

Malicious code in @redhat-cloud-services/hcc-kessel-mcp (npm)

MAL-2026-5135

Malicious code in @redhat-cloud-services/frontend-components-advisor-components (npm)

MAL-2026-5138

Malicious code in @redhat-cloud-services/frontend-components-utilities (npm)

MAL-2026-5099

Malicious code in discord-massban (PyPI)

MAL-2026-5100

Malicious code in obfuscation (PyPI)

MAL-2026-5098

Malicious code in js-shared-modules (npm)

MAL-2026-5095

Malicious code in @challenger6/vm-pattern-library (npm)

MAL-2026-5096

Malicious code in cscc-glass-house (PyPI)

MAL-2026-5094

Malicious code in hell-cipher (PyPI)

MAL-2026-5093

Malicious code in h4xupdate (PyPI)

MAL-2026-5092

Malicious code in retail-location-strategy-frontend (npm)

MAL-2026-5091

Malicious code in discord-ban (PyPI)

MAL-2026-5097

Malicious code in cms-storehub (npm)

MAL-2026-5090

Malicious code in neuralforge-ml (PyPI)

MAL-2026-5088

Malicious code in crypto-helper (PyPI)

MAL-2026-5089

Malicious code in cryptolock (PyPI)

MAL-2026-5087

Malicious code in buffer-utilities (npm)

MAL-2026-5086

Malicious code in polymarket-data (PyPI)

MAL-2026-5077

Malicious code in puppeteer (npm)

MAL-2026-5073

Malicious code in midoss (npm)

MAL-2026-5063

Malicious code in customerdigital-service-lib (npm)

MAL-2026-5059

Malicious code in chai-bundle (npm)

MAL-2026-5072

Malicious code in hardhat-evmchain (npm)