Supply Chain Incidents

MAL-2026-3427

Malicious code in @cplace-workflow-fe/cf-workflow (npm)

MAL-2026-3428

Malicious code in xxx-bale (PyPI)

GHSA-m5p4-gvpx-4mvr

GuardDog: Unsanitized human-readable scan output allows terminal escape injection from malicious package content

MAL-2026-3509

Malicious code in pp-react-v5 (npm)

MAL-2026-3426

Malicious code in mpkg123 (PyPI)

MAL-2026-3425

Malicious code in xxoo-bale (PyPI)

MAL-2026-3423

Malicious code in byvendors (npm)

MAL-2026-3424

Malicious code in dlocal-cli (PyPI)

MAL-2026-3639

Malicious code in briantreehttp (npm)

MAL-2026-3415

Malicious code in ac-sasskit (npm)

MAL-2026-3413

Malicious code in django-b64-img (PyPI)

MAL-2026-3422

Malicious code in rsflows-pexml (npm)

MAL-2026-3420

Malicious code in noon-contracts (npm)

MAL-2026-3412

Malicious code in post-purchase-bundler (npm)

MAL-2026-3411

Malicious code in web3-py-checksum (PyPI)

MAL-2026-3410

Malicious code in @miurba/alcazaba (npm)

MAL-2026-3409

Malicious code in mw-filesystem-events-nodream (npm)

MAL-2026-3646

Malicious code in erslove (npm)

MAL-2026-3645

Malicious code in dit-envv (npm)

MAL-2026-3414

Malicious code in @rsi-community/hub-schema (npm)

MAL-2026-3408

Malicious code in textwrap-ext (PyPI)

MAL-2026-3407

Malicious code in textwrap-toolkit (PyPI)

MAL-2026-3404

Malicious code in @matjp/dvi-decode (npm)

MAL-2026-3406

Malicious code in ggfmttygl-new (PyPI)