Supply Chain Incidents

MAL-2026-3679

Malicious code in @2oolkit/hyperliquid-cli (npm)

MAL-2026-3671

Malicious code in 1co (npm)

MAL-2026-3691

Malicious code in enhancer (PyPI)

MAL-2026-3682

Malicious code in @chahuadev/junk-sweeper-app (npm)

MAL-2026-3677

Malicious code in 8oo (npm)

MAL-2026-3670

Malicious code in 11j (npm)

MAL-2026-3673

Malicious code in 3pool-sushibar (npm)

MAL-2026-3689

Malicious code in dcchbot (PyPI)

MAL-2026-3667

Malicious code in 0ctf-chalweb (npm)

MAL-2026-3692

Malicious code in guan (PyPI)

MAL-2026-3610

Malicious code in housecallpro (npm)

MAL-2026-3596

Malicious code in @draftlab/auth (npm)

MAL-2026-3594

Malicious code in @draftauth/client (npm)

MAL-2026-3598

Malicious code in @draftlab/db (npm)

MAL-2026-3604

Malicious code in @tallyui/storage-sqlite (npm)

MAL-2026-3593

Malicious code in @dirigible-ai/sdk (npm)

MAL-2026-3605

Malicious code in agentwork-cli (npm)

MAL-2026-3606

Malicious code in ml-toolkit-ts (npm)

MAL-2026-3607

Malicious code in guardrails-ai (PyPI)

MAL-2026-3608

Malicious code in mistralai (PyPI)

MAL-2026-3595

Malicious code in @draftauth/core (npm)

MAL-2026-3599

Malicious code in @mesadev/saguaro (npm)

MAL-2026-3600

Malicious code in @mesadev/sdk (npm)

MAL-2026-3602

Malicious code in @ml-toolkit-ts/xgboost (npm)