Supply Chain Incidents

MAL-2026-855

Malicious code in config-toolkit (PyPI)

MAL-2026-853

Malicious code in node-dotenv-cli (npm)

MAL-2026-854

Malicious code in sinon-node (npm)

MAL-2026-852

Malicious code in chai-await (npm)

MAL-2026-851

Malicious code in python-files-mod (PyPI)

MAL-2024-12374

Malicious code in ci-metadata-python-logging (PyPI)

MAL-2025-193013

Malicious code in tablixs (PyPI)

MAL-2026-850

Malicious code in ntoctfutils (PyPI)

MAL-2026-849

Malicious code in jsonconfig-utils (PyPI)

MAL-2026-848

Malicious code in npm_cimetadata (npm)

MAL-2026-846

Malicious code in cryptowallethash (PyPI)

MAL-2026-847

Malicious code in requests-auth-toolkit (PyPI)

MAL-2024-12373

Malicious code in gpu-discovery (PyPI)

MAL-2026-845

Malicious code in rzr-home (PyPI)

MAL-2026-842

Malicious code in amplify-python-logging (PyPI)

MAL-2026-844

Malicious code in vllm-plugins (PyPI)

MAL-2026-843

Malicious code in requests-core-plugin (PyPI)

MAL-2026-841

Malicious code in lyroxpy (PyPI)

MAL-2026-839

Malicious code in search-newfrontier-podlet (npm)

MAL-2026-837

Malicious code in notification-saved-search-settings-podlet (npm)

MAL-2026-840

Malicious code in search-savedsearch-podlet (npm)

MAL-2026-836

Malicious code in myads-layout (npm)

MAL-2026-838

Malicious code in realestate-atlas (npm)

MAL-2026-829

Malicious code in @uniconvex/dotenv (npm)