Supply Chain Incidents

MAL-2026-599

Malicious code in jwt-pack (npm)

MAL-2026-597

Malicious code in n8n-nodes-comfyui-illu (npm)

MAL-2026-598

Malicious code in wallet-icon-font (npm)

MAL-2026-596

Malicious code in turbotax (npm)

MAL-2026-595

Malicious code in morty-package (PyPI)

MAL-2026-594

Malicious code in epic-asset-uploader (npm)

MAL-2026-593

Malicious code in pypi-package-explore (PyPI)

MAL-2026-591

Malicious code in kol7a (npm)

MAL-2026-592

Malicious code in lvldragdrop (npm)

MAL-2026-590

Malicious code in pytorch-mutex (PyPI)

MAL-2026-584

Malicious code in chai-as-extended (npm)

MAL-2026-585

Malicious code in chai-async-tests (npm)

MAL-2026-589

Malicious code in dotenv-embed (npm)

MAL-2026-588

Malicious code in chai-sub (npm)

MAL-2026-587

Malicious code in chai-px (npm)

MAL-2026-586

Malicious code in chai-chains-async (npm)

MAL-2026-582

Malicious code in somsodamsd (npm)

MAL-2026-578

Malicious code in @pukpuk1/somsodamsd (npm)

MAL-2026-583

Malicious code in vuejavascript (npm)

MAL-2026-580

Malicious code in somesomesome (npm)

MAL-2026-581

Malicious code in somesomesomesome (npm)

MAL-2026-579

Malicious code in skndkjasndkjan (npm)

MAL-2026-626

Malicious code in react-toast-cold (npm)

MAL-2026-570

Malicious code in lyatly-utils (npm)