Supply Chain Incidents

MAL-2026-3128

Malicious code in wm-plugin-teach-me-widget (npm)

MAL-2026-3127

Malicious code in coloreasyprint (PyPI)

MAL-2026-3126

Malicious code in lsh (crates.io)

MAL-2026-3105

Malicious code in mypypipkg (PyPI)

MAL-2026-3123

Malicious code in apple-app-store-server-library-poc (npm)

MAL-2026-3104

Malicious code in robase-ui (PyPI)

MAL-2026-3122

Malicious code in @w3m-frame/session_update (npm)

MAL-2026-3103

Malicious code in amzn_codewhisperer_streaming_client (crates.io)

MAL-2026-3120

Malicious code in @pyme-web/web-api (npm)

MAL-2026-3119

Malicious code in @pyme-web/ui-widget (npm)

MAL-2026-3118

Malicious code in @pyme-web/ui-base (npm)

MAL-2026-3101

Malicious code in amzn_consolas_client (crates.io)

MAL-2026-3102

Malicious code in semantic_search_client (crates.io)

MAL-2026-3100

Malicious code in fetch-data-api-syncapi (PyPI)

MAL-2026-3121

Malicious code in @taxmoninor/taxmon (npm)

MAL-2026-3111

Malicious code in @apple-pay-trust/authorize-payment (npm)

MAL-2026-3108

Malicious code in @activation_code/success (npm)

MAL-2026-3112

Malicious code in @apple-pay-trust/cancelled (npm)

MAL-2026-3109

Malicious code in @apiary-annex/meta (npm)

MAL-2026-3117

Malicious code in @business_promocode/cancel_promocode (npm)

MAL-2026-3106

Malicious code in @activation_code/activate (npm)

MAL-2026-3116

Malicious code in @business_promocode/apply_promocode (npm)

MAL-2026-3115

Malicious code in @b2b_blocker/show_activation_error (npm)

MAL-2026-3107

Malicious code in @activation_code/error (npm)