Supply Chain Incidents

MAL-2026-1064

Malicious code in cicd-ppe-redteam-test02 (PyPI)

MAL-2026-1063

Malicious code in cicd-ppe-redteam-test01 (PyPI)

MAL-2026-1060

Malicious code in @zinley/orion (npm)

MAL-2026-1061

Malicious code in newman-reporter-genuinepoc (npm)

MAL-2026-1062

Malicious code in express-core-validator (npm)

MAL-2026-1059

Malicious code in nuget-task-common (npm)

MAL-2026-1052

Malicious code in foundry-toolkit (npm)

MAL-2026-1050

Malicious code in launch-darkly-js (npm)

MAL-2026-1057

Malicious code in windowston (npm)

MAL-2026-1049

Malicious code in flycord (PyPI)

MAL-2026-1048

Malicious code in edx-salesforce (PyPI)

MAL-2026-1055

Malicious code in jslint-config (npm)

MAL-2026-1053

Malicious code in hardhat-node (npm)

MAL-2026-1058

Malicious code in zoddle (npm)

MAL-2026-1046

Malicious code in jest-param-validator (npm)

MAL-2026-1047

Malicious code in ts-packer (npm)

MAL-2026-1045

Malicious code in jest-node-paramset (npm)

MAL-2026-1051

Malicious code in corstoken (npm)

MAL-2026-1054

Malicious code in iosysredis (npm)

MAL-2026-1056

Malicious code in undicy-lint (npm)

MAL-2026-1044

Malicious code in awareness-demo-pkg (PyPI)

MAL-2026-1038

Malicious code in promanage (npm)

MAL-2026-1043

Malicious code in uuindex (npm)

MAL-2026-1035

Malicious code in neural-compressor-jax (PyPI)