Supply Chain Incidents

MAL-2026-623

Malicious code in marshl (PyPI)

MAL-2026-622

Malicious code in genvia-utils (PyPI)

MAL-2026-619

Malicious code in colorss (PyPI)

MAL-2026-620

Malicious code in wandb-widget (PyPI)

MAL-2026-618

Malicious code in learning-curve-projects (PyPI)

MAL-2026-617

Malicious code in roots-cms-client (npm)

MAL-2026-616

Malicious code in c11dff444 (npm)

MAL-2026-615

Malicious code in teaser-nav (npm)

MAL-2026-614

Malicious code in mkdocs-dataopslive (PyPI)

MAL-2026-612

Malicious code in sharedclasses (npm)

MAL-2026-613

Malicious code in fastpi (PyPI)

MAL-2026-611

Malicious code in mbo-letters-cl (npm)

MAL-2026-610

Malicious code in snapshot-date (PyPI)

MAL-2026-609

Malicious code in euskalplantxa (npm)

MAL-2026-608

Malicious code in ezviz-shop-mall (npm)

MAL-2026-607

Malicious code in banquet-runtime-modules (npm)

MAL-2026-606

Malicious code in userver-requires-at-least-python-3-10 (PyPI)

MAL-2026-605

Malicious code in dhgshop (npm)

MAL-2026-627

Malicious code in theanswre (PyPI)

MAL-2026-604

Malicious code in securedrop-workstation-dom0-config (PyPI)

MAL-2026-603

Malicious code in mcp-pdftool-plus (PyPI)

MAL-2026-602

Malicious code in tableasets (PyPI)

MAL-2026-601

Malicious code in tableautes (PyPI)

MAL-2026-600

Malicious code in researchpoc2 (npm)