Supply Chain Incidents

MAL-2026-997

Malicious code in npm-security-testing (npm)

MAL-2026-998

Malicious code in rbxm-tools (npm)

MAL-2026-986

Malicious code in en-thrift-internal (npm)

MAL-2026-985

Malicious code in conduit-utils (npm)

MAL-2026-994

Malicious code in vl-ui-code-preview (npm)

MAL-2026-995

Malicious code in vl-ui-contact-card (npm)

MAL-2026-988

Malicious code in vl-ui-action-group (npm)

MAL-2026-992

Malicious code in vl-ui-button (npm)

MAL-2026-991

Malicious code in vl-ui-breadcrumb (npm)

MAL-2026-990

Malicious code in vl-ui-body (npm)

MAL-2026-993

Malicious code in vl-ui-checkbox (npm)

MAL-2026-987

Malicious code in vl-ui-accessibility (npm)

MAL-2026-989

Malicious code in vl-ui-alert (npm)

MAL-2026-984

Malicious code in myasicapi (PyPI)

MAL-2026-983

Malicious code in tensorflow-opt (PyPI)

MAL-2026-982

Malicious code in trunket-dev-driver (PyPI)

MAL-2026-981

Malicious code in dt-fe-t2d-marketplace (npm)

MAL-2026-980

Malicious code in the-storyverse (npm)

MAL-2026-979

Malicious code in home-robot (PyPI)

MAL-2026-978

Malicious code in microsoft-cms-client (npm)

MAL-2026-977

Malicious code in airbnb-identity (PyPI)

MAL-2026-975

Malicious code in azure-postgresql-auth (npm)

MAL-2026-976

Malicious code in rollup-plugin-polyfill-swc (npm)

MAL-2026-967

Malicious code in parse-compat (npm)