Supply Chain Incidents

MAL-2026-3662

Malicious code in py-requests (PyPI)

MAL-2026-3659

Malicious code in rich-util (PyPI)

MAL-2026-3658

Malicious code in load-bufferjs (npm)

MAL-2026-3656

Malicious code in buffer-export (npm)

MAL-2026-3657

Malicious code in chai-as-streamed (npm)

MAL-2026-3655

Malicious code in puppeteer-core (npm)

MAL-2026-3654

Malicious code in @puppeteer/browsers (npm)

MAL-2026-3714

Malicious code in hello-world-pkg-value-value-p (npm)

MAL-2026-3717

Malicious code in truffle-js (npm)

MAL-2026-3712

Malicious code in hardhat-common (npm)

MAL-2026-3713

Malicious code in hardhat-core (npm)

MAL-2026-3708

Malicious code in ethers-io (npm)

MAL-2026-3715

Malicious code in solc-helper (npm)

MAL-2026-3707

Malicious code in ethers-common (npm)

MAL-2026-3716

Malicious code in truffle-helper (npm)

MAL-2026-3718

Malicious code in web3-common (npm)

MAL-2026-3719

Malicious code in web3-core-js (npm)

MAL-2026-3638

Malicious code in openai-spellcheckers (PyPI)

MAL-2026-3688

Malicious code in d4rktg (PyPI)

MAL-2026-3683

Malicious code in @dropout-ai/runtime (npm)

MAL-2026-3637

Malicious code in intercom-php (Packagist)

MAL-2026-3636

Malicious code in knot-simple-formatter (RubyGems)

MAL-2026-3633

Malicious code in knot-rack-session-store (RubyGems)

MAL-2026-3632

Malicious code in knot-devise-jwt-helper (RubyGems)