Supply Chain Incidents

MAL-2026-1021

Malicious code in @atg-aml-shared/kyc-domain (npm)

MAL-2026-1019

Malicious code in spark-audit-notify (PyPI)

MAL-2026-1018

Malicious code in do-not-install-this-package-003 (PyPI)

MAL-2026-1016

Malicious code in js-multer (npm)

MAL-2026-1014

Malicious code in chai-iotype (npm)

MAL-2026-1013

Malicious code in chai-as-pause (npm)

MAL-2026-1017

Malicious code in json-mapping-srcs (npm)

MAL-2026-1015

Malicious code in es1int-config (npm)

MAL-2026-1006

Malicious code in chai-tools (npm)

MAL-2026-1005

Malicious code in argon-web3-chain (npm)

MAL-2026-1011

Malicious code in node-argon (npm)

MAL-2026-1007

Malicious code in dotenvx-ext (npm)

MAL-2026-1010

Malicious code in modify-setting (npm)

MAL-2026-1008

Malicious code in es1int-re1ease (npm)

MAL-2026-1012

Malicious code in ultimates-express (npm)

MAL-2026-1009

Malicious code in express-soaps (npm)

MAL-2026-1004

Malicious code in request-httpx-9 (PyPI)

MAL-2026-1040

Malicious code in react-markdown-canvas (npm)

MAL-2026-1002

Malicious code in newrubylogger (RubyGems)

MAL-2026-1003

Malicious code in cnnct-eaas-corre (PyPI)

MAL-2026-1001

Malicious code in request-httpx-4 (PyPI)

MAL-2026-1041

Malicious code in secure-monkey (npm)

MAL-2026-1000

Malicious code in scraper-npm (PyPI)

MAL-2026-999

Malicious code in react-dropzone-truffle (npm)