Supply Chain Incidents

MAL-2026-1278

Malicious code in chat-xdk (PyPI)

MAL-2026-1277

Malicious code in prateek-yadav23 (PyPI)

MAL-2026-1276

Malicious code in flowfix (PyPI)

MAL-2026-1275

Malicious code in hostlists-plugins-default (PyPI)

MAL-2026-1271

Malicious code in qq-console (npm)

MAL-2026-1269

Malicious code in @wgu-edu/wgu-core (npm)

MAL-2026-1270

Malicious code in @wgu-edu/wgu-icons (npm)

MAL-2026-1268

Malicious code in @shenira/libsignal-node (npm)

MAL-2026-1266

Malicious code in @shenira/baileys (npm)

MAL-2026-1267

Malicious code in @shenira/baileysx (npm)

MAL-2026-1272

Malicious code in test-mal-npm-pkg-2 (npm)

MAL-2026-1274

Malicious code in test-mal-npm-pkg-not-local (npm)

MAL-2026-1273

Malicious code in test-mal-npm-pkg-local (npm)

MAL-2026-1265

Malicious code in aaaaaxxxxx (npm)

MAL-2026-1264

Malicious code in python-requirements (PyPI)

MAL-2026-1263

Malicious code in python-module-installer (PyPI)

MAL-2026-1261

Malicious code in fastapi-requests (PyPI)

MAL-2026-1262

Malicious code in fastapis-requests (PyPI)

MAL-2026-1260

Malicious code in webmd-url (npm)

MAL-2026-1259

Malicious code in pino-sdk-v2 (npm)

MAL-2026-1258

Malicious code in tether-dev-docs (npm)

MAL-2026-1257

Malicious code in pdfjs-dist-fourth (npm)

MAL-2026-1247

Malicious code in @imhuman/corp-build-utils-poc (npm)

MAL-2026-1249

Malicious code in imhuman-fw-logger (npm)