Supply Chain Incidents

MAL-2026-1316

Malicious code in xc-input-toggle (npm)

MAL-2026-1310

Malicious code in iron-media-query (npm)

MAL-2026-1299

Malicious code in monoping (npm)

MAL-2026-1298

Malicious code in jsonify-core (npm)

MAL-2026-1297

Malicious code in json-merge-tool (npm)

MAL-2026-1453

Malicious code in hxq-misc-utils-0379 (PyPI)

MAL-2026-1296

Malicious code in bpsm (PyPI)

MAL-2026-1294

Malicious code in causal-canvas (PyPI)

MAL-2026-1295

Malicious code in tabformerlite (PyPI)

MAL-2026-1293

Malicious code in tw-modern-ui (npm)

MAL-2026-1292

Malicious code in odds-analyzer (npm)

MAL-2026-1291

Malicious code in requests-lite (PyPI)

MAL-2026-1290

Malicious code in remjsonparse (PyPI)

MAL-2026-1289

Malicious code in aioutil3 (PyPI)

MAL-2026-1288

Malicious code in arnavtest123 (PyPI)

MAL-2026-1287

Malicious code in simple-text-parser (PyPI)

MAL-2026-1286

Malicious code in demozecosse (PyPI)

MAL-2026-1283

Malicious code in demozecob (PyPI)

MAL-2026-1285

Malicious code in demozecox (PyPI)

MAL-2026-1284

Malicious code in demozecosso (PyPI)

MAL-2026-1282

Malicious code in xmrig-miner (PyPI)

MAL-2026-1280

Malicious code in py-sysbench (PyPI)

MAL-2026-1279

Malicious code in cpucheck (PyPI)

MAL-2026-1281

Malicious code in pyutils-helper (PyPI)