Supply Chain Incidents

MAL-2026-4256

Malicious code in @citi-icg-171632/citicms-repo-component (npm)

MAL-2026-4763

Malicious code in pulumi-vcd (PyPI)

MAL-2026-4756

Malicious code in ml2000 (PyPI)

MAL-2026-4668

Malicious code in share-anything-cli (npm)

MAL-2026-4255

Malicious code in cdk-sagemaker-notebook-workflow (npm)

MAL-2026-4457

Malicious code in @tmecontinue/claude (npm)

MAL-2026-4533

Malicious code in codebuff-cli (npm)

MAL-2026-4563

Malicious code in finkrouter (npm)

MAL-2026-4455

Malicious code in @thebros/create-benjamin (npm)

MAL-2026-4254

Malicious code in reactive-cdk-app (npm)

MAL-2026-4395

Malicious code in @inetafrica/open-claudia (npm)

MAL-2026-4417

Malicious code in @pisell/pisellos (npm)

MAL-2026-4753

Malicious code in gt-tester-exp-profiler-exp-00000017 (PyPI)

MAL-2026-4597

Malicious code in kurumi-fca (npm)

MAL-2026-4752

Malicious code in gt-tester-exp-profiler-exp-00000015 (PyPI)

MAL-2026-4768

Malicious code in sklern (PyPI)

MAL-2026-4387

Malicious code in @euqns/nudge-mcp (npm)

MAL-2026-4572

Malicious code in get-package-lint (npm)

MAL-2026-4671

Malicious code in skipshot-agent (npm)

MAL-2026-4252

Malicious code in @43uh3ig43/telemetry-client (npm)

MAL-2026-4253

Malicious code in pylogft (PyPI)

MAL-2026-4604

Malicious code in lynx-keeper-cli (npm)

MAL-2026-4735

Malicious code in xy-ai-chat (npm)

MAL-2026-4653

Malicious code in qaq-core-util-v2 (npm)