Supply Chain Incidents

MAL-2026-2253

Malicious code in dgxeon-soket-buttonx (npm)

MAL-2026-2249

Malicious code in chai-as-added (npm)

MAL-2026-2251

Malicious code in testtestsharp (npm)

MAL-2026-2250

Malicious code in test1sharp (npm)

MAL-2026-2247

Malicious code in cua-primitives-server (npm)

MAL-2026-2246

Malicious code in @ev-tech/eva-container-api (npm)

MAL-2026-2248

Malicious code in shop-republik-ch (npm)

MAL-2026-2245

Malicious code in requests-testik111 (PyPI)

MAL-2026-2244

Malicious code in fluxhttp (PyPI)

MAL-2026-2243

Malicious code in browserstack-electron-forge-include-package-plugin (npm)

MAL-2026-2242

Malicious code in somepentest-test-package (PyPI)

MAL-2026-2238

Malicious code in spr-i18n-labels (npm)

MAL-2026-2239

Malicious code in chaostoolkit-turbulence (PyPI)

MAL-2026-2240

Malicious code in magtape (PyPI)

MAL-2026-2241

Malicious code in pacbot (PyPI)

MAL-2026-2237

Malicious code in jsonify-builder (npm)

MAL-2026-2236

Malicious code in onboarding-server (npm)

MAL-2026-2235

Malicious code in srcsrctest (npm)

MAL-2026-2234

Malicious code in security-install-analytics (npm)

MAL-2026-2233

Malicious code in lightmock (PyPI)

MAL-2026-2232

Malicious code in checkmarx.cx-dev-assist (VSCode:https://open-vsx.org)

MAL-2026-2231

Malicious code in checkmarx.ast-results (VSCode:https://open-vsx.org)

MAL-2026-2230

Malicious code in aquasecurityofficial.trivy-vulnerability-scanner (VSCode:https://open-vsx.org)

MAL-2026-2229

Malicious code in @zecho/libsignal (npm)