Supply Chain Incidents

MAL-2026-16487

Malicious code in dip.api (NuGet)

MAL-2026-16385

Malicious code in tlxbnhd (npm)

MAL-2026-16384

Malicious code in tldriver (npm)

MAL-2026-16383

Malicious code in mxdriver (npm)

MAL-2026-16380

Malicious code in chai-logger (npm)

MAL-2026-16378

Malicious code in @tesla-insurance/vinless-quote (npm)

MAL-2026-16379

Malicious code in @user-services/web-components (npm)

MAL-2026-16382

Malicious code in take-home-caller-id (npm)

MAL-2026-16381

Malicious code in cisco-github-simple (npm)

MAL-2026-16377

Malicious code in cloushaar-poc-exfil-91827 (PyPI)

MAL-2026-16375

Malicious code in test-react-app-out (npm)

MAL-2026-16374

Malicious code in test-react-app-in (npm)

MAL-2026-16376

Malicious code in test-react-app-way (npm)

MAL-2026-16372

Malicious code in @zig-design-system/react (npm)

MAL-2026-16373

Malicious code in wos-library (npm)

MAL-2026-16371

Malicious code in @vite-tab/tabui (npm)

MAL-2026-16370

Malicious code in @uol-afiliados/affiliated-config-lib (npm)

MAL-2026-16367

Malicious code in math-universe (npm)

MAL-2026-16369

Malicious code in mathsbase (npm)

MAL-2026-16364

Malicious code in bytepack-probe-a7x3 (npm)

MAL-2026-16368

Malicious code in mathmain (npm)

MAL-2026-16363

Malicious code in blue-string-formatter-utilss (npm)

MAL-2026-16365

Malicious code in my-ctf-helper-script-9921 (npm)

MAL-2026-16366

Malicious code in pullgetsage (PyPI)