Supply Chain Incidents

MAL-2026-922

Malicious code in compass-e2e-tests (npm)

MAL-2026-921

Malicious code in cicibot-fix-message-naming (PyPI)

MAL-2026-920

Malicious code in ambar-src (npm)

MAL-2026-919

Malicious code in mds-webcomponents (npm)

MAL-2026-918

Malicious code in webpack-vite (npm)

MAL-2026-917

Malicious code in aliyun-python-sdk-v2 (PyPI)

MAL-2026-916

Malicious code in alibabacloude (PyPI)

MAL-2026-915

Malicious code in alibabacloud-code-tool (PyPI)

MAL-2026-914

Malicious code in @qualys/react-web (npm)

MAL-2026-913

Malicious code in groq-ppe-pkg (PyPI)

MAL-2026-912

Malicious code in http-request-toolkit (PyPI)

MAL-2026-911

Malicious code in malpkgv2-0 (PyPI)

MAL-2026-910

Malicious code in dns-execution-test (PyPI)

MAL-2026-909

Malicious code in clawdist (PyPI)

MAL-2026-943

Malicious code in ethereums-lint (npm)

MAL-2026-942

Malicious code in ethereum-lint (npm)

MAL-2026-908

Malicious code in hops-preset-jest (npm)

MAL-2026-907

Malicious code in tronpad (PyPI)

MAL-2026-906

Malicious code in cucumber_json_schema (RubyGems)

MAL-2026-905

Malicious code in marshmellows (PyPI)

MAL-2026-904

Malicious code in strands-agents-anthropic (PyPI)

MAL-2026-903

Malicious code in requests-toolkit (PyPI)

MAL-2026-902

Malicious code in crc32fast (PyPI)

MAL-2026-900

Malicious code in cubaflixdownload (PyPI)