Supply Chain Incidents

MAL-2026-3623

Malicious code in github.com/BufferZoneCorp/go-retryablehttp (Go)

MAL-2026-3622

Malicious code in github.com/BufferZoneCorp/go-metrics-sdk (Go)

MAL-2026-3625

Malicious code in github.com/BufferZoneCorp/go-stdlog (Go)

MAL-2026-3632

Malicious code in knot-devise-jwt-helper (RubyGems)

MAL-2026-3621

Malicious code in github.com/BufferZoneCorp/go-envconfig (Go)

MAL-2026-3628

Malicious code in github.com/BufferZoneCorp/log-core (Go)

MAL-2026-3627

Malicious code in github.com/BufferZoneCorp/grpc-client (Go)

MAL-2026-3624

Malicious code in github.com/BufferZoneCorp/go-stdlib-ext (Go)

MAL-2026-3626

Malicious code in github.com/BufferZoneCorp/go-weather-sdk (Go)

MAL-2026-3620

Malicious code in github.com/BufferZoneCorp/config-loader (Go)

MAL-2026-3636

Malicious code in knot-simple-formatter (RubyGems)

MAL-2026-3633

Malicious code in knot-rack-session-store (RubyGems)

MAL-2026-3635

Malicious code in knot-rspec-formatter-json (RubyGems)

MAL-2026-3630

Malicious code in knot-activesupport-logger (RubyGems)

MAL-2026-3653

Malicious code in @design-system-coopeuch/web (npm)

MAL-2026-3686

Malicious code in amino-fix (PyPI)

MAL-2026-3648

Malicious code in auth-javascript (npm)

MAL-2026-3649

Malicious code in iceberg-javascript (npm)

MAL-2026-3652

Malicious code in supabase-javascript (npm)

MAL-2026-3650

Malicious code in microsoft-applicationinsights-common (npm)

MAL-2026-3651

Malicious code in ms-graph-types (npm)

MAL-2026-3619

Malicious code in txwrap (PyPI)

MAL-2026-3684

Malicious code in @gusmano/reext (npm)

MAL-2026-3685

Malicious code in always-updates (PyPI)