Supply Chain Incidents

MAL-2026-454

Malicious code in @mailpoet/component (npm)

MAL-2026-453

Malicious code in @fortinet/fortigate-autoscale (npm)

MAL-2026-452

Malicious code in @brl-laiwb/ng-laiwb-api (npm)

MAL-2026-451

Malicious code in @alluxio/common-ui (npm)

MAL-2026-458

Malicious code in csv-parsing-xz (npm)

MAL-2026-457

Malicious code in csv-parsing-xx (npm)

MAL-2026-450

Malicious code in sympy-dev (PyPI)

MAL-2026-448

Malicious code in rank253222 (npm)

MAL-2026-449

Malicious code in icloudprocessor (PyPI)

MAL-2026-447

Malicious code in ttam-ploy (PyPI)

MAL-2026-445

Malicious code in code-transfering-3 (PyPI)

MAL-2026-446

Malicious code in code-transfering-4 (PyPI)

MAL-2026-444

Malicious code in terminalbrush (PyPI)

MAL-2026-443

Malicious code in 1q847 (PyPI)

MAL-2026-442

Malicious code in xadauiom (PyPI)

MAL-2026-440

Malicious code in anduril-lattice-sdk-grpc-python (PyPI)

MAL-2026-441

Malicious code in spellcheckpy (PyPI)

MAL-2026-439

Malicious code in tv-admin-commons (npm)

MAL-2026-438

Malicious code in ts-tweetnacl-utils (npm)

MAL-2026-437

Malicious code in lumo-api-client (npm)

MAL-2026-436

Malicious code in jquery-ajaxchimp (npm)

MAL-2026-435

Malicious code in aligntype (npm)

MAL-2026-409

Malicious code in chai-async-test (npm)

MAL-2026-415

Malicious code in dotenv-expanded (npm)