Supply Chain Incidents

MAL-2026-123

Malicious code in wifzap (npm)

wwwt

MAL-2026-124

Malicious code in wwwt (npm)

hiqomu

MAL-2026-115

Malicious code in hiqomu (npm)

jh5o

MAL-2026-116

Malicious code in jh5o (npm)

aog3

MAL-2026-111

Malicious code in aog3 (npm)

@nestor_hexom/garfield1

MAL-2026-109

Malicious code in @nestor_hexom/garfield1 (npm)

garfield777

MAL-2026-114

Malicious code in garfield777 (npm)

@nestor_hexom/qyxb

MAL-2026-110

Malicious code in @nestor_hexom/qyxb (npm)

klywarns

MAL-2026-119

Malicious code in klywarns (npm)

fbfu

MAL-2026-112

Malicious code in fbfu (npm)

1kzr

MAL-2026-107

Malicious code in 1kzr (npm)

kdb1-demo-v2

MAL-2026-117

Malicious code in kdb1-demo-v2 (npm)

syntax-class-properties

MAL-2026-105

Malicious code in syntax-class-properties (npm)

transform-decorators-legacy

MAL-2026-106

Malicious code in transform-decorators-legacy (npm)

sort-imports-es6-autofix

MAL-2026-104

Malicious code in sort-imports-es6-autofix (npm)

const-enum

MAL-2026-103

Malicious code in const-enum (npm)

openblox-ts

MAL-2026-101

Malicious code in openblox-ts (npm)

redis-cookie-ts

MAL-2026-102

Malicious code in redis-cookie-ts (npm)

eslint-plugin-supertest

MAL-2026-100

Malicious code in eslint-plugin-supertest (npm)

py-publish-test-0126

MAL-2026-98

Malicious code in py-publish-test-0126 (PyPI)

Typosquat

testingpy

MAL-2026-99

Malicious code in testingpy (PyPI)

Typosquat

robustinfer

MAL-2026-97

Malicious code in robustinfer (PyPI)

pycolorom

MAL-2026-96

Malicious code in pycolorom (PyPI)

Typosquat

evm-gateway-contracts-private

MAL-2026-88

Malicious code in evm-gateway-contracts-private (npm)