Supply Chain Incidents

MAL-2026-16272

Malicious code in kartykgithub-multiversion-a (npm)

pyjstat-smooth

PyPI

MAL-2026-16267

Malicious code in pyjstat-smooth (PyPI)

@kartyk-github-org/takedown-b

MAL-2026-16266

Malicious code in @kartyk-github-org/takedown-b (npm)

@kartyk-github-org/takedown-a

MAL-2026-16265

Malicious code in @kartyk-github-org/takedown-a (npm)

tailwindcss-form-ui

MAL-2026-16262

Malicious code in tailwindcss-form-ui (npm)

Typosquat

tailwindcss-form-utils

MAL-2026-16263

Malicious code in tailwindcss-form-utils (npm)

@railone/image-utils

MAL-2026-16261

Malicious code in @railone/image-utils (npm)

aiosendletter

PyPI

MAL-2026-16264

Malicious code in aiosendletter (PyPI)

confx1789550882

MAL-2026-16260

Malicious code in confx1789550882 (npm)

randompkgd

MAL-2026-16258

Malicious code in randompkgd (npm)

randompkga

MAL-2026-16255

Malicious code in randompkga (npm)

randompkgc

MAL-2026-16257

Malicious code in randompkgc (npm)

randompkge

MAL-2026-16259

Malicious code in randompkge (npm)

randompkgb

MAL-2026-16256

Malicious code in randompkgb (npm)

laycot

MAL-2026-16253

Malicious code in laycot (npm)

pulse-pwn-9f3a2

MAL-2026-16254

Malicious code in pulse-pwn-9f3a2 (npm)

ragacateslikodi

MAL-2026-16252

Malicious code in ragacateslikodi (npm)

tailwindcss-contact-form

MAL-2026-16251

Malicious code in tailwindcss-contact-form (npm)

marketing-mcp

PyPI

MAL-2026-16250

Malicious code in marketing-mcp (PyPI)

kartykgithub-takedown-b

MAL-2026-16249

Malicious code in kartykgithub-takedown-b (npm)

kartykgithub-takedown-a

MAL-2026-16248

Malicious code in kartykgithub-takedown-a (npm)

pkg-rollback-dreed-viced-sonic-ponds

MAL-2026-16247

Malicious code in pkg-rollback-dreed-viced-sonic-ponds (npm)

kartyk-github-single-ver-pkg

MAL-2026-16245

Malicious code in kartyk-github-single-ver-pkg (npm)

kartyk-github-token-pkg

MAL-2026-16246

Malicious code in kartyk-github-token-pkg (npm)