Supply Chain Incidents

MAL-2026-3157

Malicious code in apple-internal-auth-v3 (npm)

MAL-2026-3162

Malicious code in apple-pki-cert-validator (npm)

MAL-2026-3158

Malicious code in apple-internal-pki-trust (npm)

MAL-2026-3153

Malicious code in apple-infra-final-escape (npm)

MAL-2026-3163

Malicious code in npm-global-util (npm)

MAL-2026-3147

Malicious code in coinmate-typescript-client (npm)

MAL-2026-3146

Malicious code in timenow-py (PyPI)

MAL-2026-3145

Malicious code in timenow (PyPI)

MAL-2026-3143

Malicious code in timemcp-utils (PyPI)

MAL-2026-3144

Malicious code in timemcp190825790125120985125 (PyPI)

MAL-2026-3142

Malicious code in timemcp-client (PyPI)

MAL-2026-3141

Malicious code in coinmate-api (PyPI)

MAL-2026-3137

Malicious code in core-roblox-utils (PyPI)

MAL-2026-3139

Malicious code in robase-start (PyPI)

MAL-2026-3138

Malicious code in robase-apis (PyPI)

MAL-2026-3135

Malicious code in sf-th-requests (PyPI)

MAL-2026-3136

Malicious code in timestamp-py (PyPI)

MAL-2026-3134

Malicious code in timemcp-py (PyPI)

MAL-2026-3133

Malicious code in fetchapi-syncdata-pypi (PyPI)

MAL-2026-3132

Malicious code in timemcp (PyPI)

MAL-2026-3140

Malicious code in fivem-monitor (npm)

MAL-2026-3131

Malicious code in kcvlib (PyPI)

MAL-2026-3130

Malicious code in genmedia-izumi-agent (PyPI)

MAL-2026-3129

Malicious code in supertag (crates.io)