Supply Chain Incidents

MAL-2026-3303

Malicious code in ally-whitelist (npm)

MAL-2026-3244

Malicious code in puan4 (PyPI)

MAL-2026-3290

Malicious code in @allyfinancial/allyfinancial-api (npm)

MAL-2026-3301

Malicious code in ally-json-threat-protect (npm)

MAL-2026-3302

Malicious code in ally-starter-api (npm)

MAL-2026-3300

Malicious code in ally-forms (npm)

MAL-2026-3296

Malicious code in ally-badges (npm)

MAL-2026-3298

Malicious code in ally-ccapi (npm)

MAL-2026-3243

Malicious code in puan3 (PyPI)

MAL-2026-3242

Malicious code in sf-vmeval-requests (PyPI)

MAL-2026-3241

Malicious code in nextjs-chat-with-ai-service (npm)

MAL-2026-3240

Malicious code in timesmcplib (PyPI)

MAL-2026-3239

Malicious code in timermcplib (PyPI)

MAL-2026-3238

Malicious code in timemcplib (PyPI)

MAL-2026-3237

Malicious code in protocol-stub-generator (PyPI)

MAL-2026-3236

Malicious code in aocl-sparse-v3 (PyPI)

MAL-2026-3235

Malicious code in apexomni-client (PyPI)

MAL-2026-3234

Malicious code in apexpro (npm)

MAL-2026-3233

Malicious code in apexomni (npm)

MAL-2026-3287

Malicious code in ams-ssk (npm)

MAL-2026-3288

Malicious code in common-tg-service (npm)

MAL-2026-3232

Malicious code in codewhisperer-streaming (npm)

MAL-2026-3229

Malicious code in currenttimerlib (PyPI)

MAL-2026-3230

Malicious code in currenttimerpy (PyPI)