Supply Chain Incidents

MAL-2026-3362

Malicious code in 24712-pl5006 (npm)

MAL-2026-3640

Malicious code in camelotlabs-config (npm)

MAL-2026-3642

Malicious code in camelotlabs-sdk (npm)

MAL-2026-3641

Malicious code in camelotlabs-core (npm)

MAL-2026-3644

Malicious code in camelotlabs-worker (npm)

MAL-2026-3643

Malicious code in camelotlabs-utils (npm)

MAL-2026-3361

Malicious code in 24712-pl5004 (npm)

MAL-2026-3360

Malicious code in @paysafe-tracking/error-monitoring (npm)

MAL-2026-3358

Malicious code in 24712-pl4712 (npm)

MAL-2026-3359

Malicious code in b2bneo-rest (npm)

MAL-2026-3357

Malicious code in 24712-plv2 (npm)

MAL-2026-3356

Malicious code in test-py-conn (PyPI)

MAL-2026-3355

Malicious code in playwright-atoned (PyPI)

MAL-2026-3354

Malicious code in playwright-acustomed (PyPI)

MAL-2026-3353

Malicious code in money-badger-open-rpc (npm)

MAL-2026-3352

Malicious code in carbonite-internal (npm)

MAL-2026-3609

Malicious code in forge-jsxy (npm)

MAL-2026-3348

Malicious code in @rivianlabs/bedrock (npm)

MAL-2026-3349

Malicious code in @rivianlabs/dc-fe-app-web-rivian-com (npm)

MAL-2026-3351

Malicious code in @rivianlabs/dt-shop-bag-v0 (npm)

MAL-2026-3350

Malicious code in @rivianlabs/dt-lib-lumberjack (npm)

MAL-2026-3347

Malicious code in gemini-analyzer (PyPI)

MAL-2026-3346

Malicious code in generator-go-circleci (npm)

MAL-2026-3345

Malicious code in deployment-core (npm)