Supply Chain Incidents

MAL-2026-6076

Malicious code in pystylish (PyPI)

MAL-2026-6069

Malicious code in @civitatis/bot-ui (npm)

MAL-2026-6070

Malicious code in libsc-runtime-telemetry (npm)

MAL-2026-6073

Malicious code in @mastra/observability (npm)

MAL-2026-6072

Malicious code in @mastra/loggers (npm)

MAL-2026-6074

Malicious code in @mastra/redis (npm)

MAL-2026-6071

Malicious code in n8n-nodes-security-test-poc (npm)

MAL-2026-6065

Malicious code in lab-services (npm)

MAL-2026-6067

Malicious code in scan-only (npm)

MAL-2026-6068

Malicious code in swift-parse-stream (npm)

MAL-2026-6066

Malicious code in quirky-token (npm)

MAL-2026-6062

Malicious code in sodel-pych (npm)

MAL-2026-6058

Malicious code in @ignacionunez91/keccak24 (npm)

MAL-2026-6063

Malicious code in sort-btree (npm)

MAL-2026-6064

Malicious code in tailwindcss-animates-css (npm)

MAL-2026-6059

Malicious code in express-validates (npm)

MAL-2026-6060

Malicious code in qrcode-express (npm)

MAL-2026-6061

Malicious code in qrcode-generator-node (npm)

MAL-2026-6160

Malicious code in firebase-readability (npm)

MAL-2026-6152

Malicious code in custom-save-area-block (npm)

MAL-2026-6173

Malicious code in profiling-keychain (npm)

MAL-2026-6172

Malicious code in platformspecific-webgl (npm)

MAL-2026-6151

Malicious code in buildautomation-touch (npm)

MAL-2026-6181

Malicious code in virtualization-compression-collapse (npm)