Supply Chain Incidents

MAL-2026-665

Malicious code in transform-exponentiation-operator (npm)

MAL-2026-663

Malicious code in transform-async-generator-functions (npm)

MAL-2026-667

Malicious code in typed-document-node (npm)

MAL-2026-666

Malicious code in transform-react-display-name (npm)

MAL-2026-660

Malicious code in dns-troubleshoot-toolkit-xyz123 (npm)

MAL-2026-661

Malicious code in netlify-project-helper (npm)

MAL-2026-669

Malicious code in vite-ui-components (npm)

MAL-2026-658

Malicious code in ansi-universal-ui (npm)

MAL-2026-659

Malicious code in atg-atgse (npm)

MAL-2026-662

Malicious code in researchpoc (npm)

MAL-2026-657

Malicious code in react-dnd-legacy-html5-backend (npm)

MAL-2026-656

Malicious code in jshint-groups (npm)

MAL-2026-655

Malicious code in pipeline-poision-test (PyPI)

MAL-2026-651

Malicious code in cat-admin-tool (PyPI)

MAL-2026-652

Malicious code in chia-pool-reference (PyPI)

MAL-2026-653

Malicious code in credit-decision-metrics (PyPI)

MAL-2026-654

Malicious code in zabitog (PyPI)

MAL-2026-650

Malicious code in tableapy (PyPI)

MAL-2026-649

Malicious code in callapirequests (PyPI)

MAL-2026-646

Malicious code in picking-miniapp (npm)

MAL-2026-647

Malicious code in react-native-expofp (npm)

MAL-2026-644

Malicious code in dise-pkt (npm)

MAL-2026-642

Malicious code in @hemanshu_patil/xcode (npm)

MAL-2026-643

Malicious code in @hemanshu_patil/xcode-windows-x64 (npm)