Supply Chain Incidents

MAL-2026-16005

Malicious code in agentrc-security-poc-policy (npm)

MAL-2026-15938

Malicious code in dac-tools (PyPI)

MAL-2026-16006

Malicious code in vishal_312pkg (npm)

MAL-2026-15937

Malicious code in minecraftmodes (PyPI)

MAL-2026-15961

Malicious code in @liuliang520500/sinataoke_cn_test (npm)

MAL-2026-15960

Malicious code in @liuliang520500/sinataoke_cn (npm)

MAL-2026-15959

Malicious code in @liuliang520500/pdd-sdk-new (npm)

MAL-2026-15957

Malicious code in @liuliang520500/jd-sdk (npm)

MAL-2026-15958

Malicious code in @liuliang520500/pdd-sdk (npm)

MAL-2026-15962

Malicious code in @liuliang520500/taobao-topclient (npm)

MAL-2026-15963

Malicious code in @pilllesss/yorn (npm)

MAL-2026-15975

Malicious code in dcftunnel (npm)

MAL-2026-15943

Malicious code in 1cattunnel (npm)

MAL-2026-15995

Malicious code in multicore-kit (npm)

MAL-2026-15974

Malicious code in date-fns-formatter (npm)

MAL-2026-15969

Malicious code in array-frames (npm)

MAL-2026-15997

Malicious code in node-helper (npm)

MAL-2026-15991

Malicious code in jwt-logger (npm)

MAL-2026-15970

Malicious code in array-scala (npm)

MAL-2026-15936

Malicious code in trongridew (PyPI)

MAL-2026-15956

Malicious code in @domyjs/throttle (npm)

MAL-2026-15955

Malicious code in @domyjs/router (npm)

MAL-2026-15954

Malicious code in @domyjs/reactive (npm)

MAL-2026-15951

Malicious code in @domyjs/i18n (npm)