Supply Chain Incidents

MAL-2026-1225

Malicious code in urllib-slim (PyPI)

MAL-2026-1220

Malicious code in corp-build-utils-poc (npm)

MAL-2026-1221

Malicious code in xrpl-dev-portal (npm)

MAL-2026-1219

Malicious code in demo-pipelinetest (npm)

MAL-2026-1217

Malicious code in @vk-cloud-billing/common (npm)

MAL-2026-1218

Malicious code in chai-as-confirmed (npm)

MAL-2026-1227

Malicious code in gaia-marionette (npm)

MAL-2026-1216

Malicious code in pdfjs-dist-v5 (npm)

MAL-2026-1206

Malicious code in polymarket-trade-bot-api (npm)

MAL-2026-1215

Malicious code in whop-sdk (npm)

MAL-2026-1203

Malicious code in polmarket (npm)

MAL-2026-1192

Malicious code in chai-as-proofed (npm)

MAL-2026-1191

Malicious code in chai-as-mock (npm)

MAL-2026-1194

Malicious code in cmc-client (npm)

MAL-2026-1205

Malicious code in polymarket-provider (npm)

MAL-2026-1202

Malicious code in mvn-runtime (npm)

MAL-2026-1209

Malicious code in tailwindcss-form-bundler (npm)

MAL-2026-1188

Malicious code in alpha-replicator (npm)

MAL-2026-1208

Malicious code in tailwindcss-fonts-bundler (npm)

MAL-2026-1204

Malicious code in polygon-bitquery-api (npm)

MAL-2026-1193

Malicious code in cloud-apis (npm)

MAL-2026-1210

Malicious code in tailwindcss-forms-animation (npm)

MAL-2026-1201

Malicious code in mongos-api (npm)

MAL-2026-1200

Malicious code in mongoose-apis (npm)