Supply Chain Incidents

MAL-2026-4651

Malicious code in pulse-axios (npm)

MAL-2026-4659

Malicious code in rdflib (npm)

MAL-2026-4180

Malicious code in stripe-utils (PyPI)

MAL-2026-4494

Malicious code in axois-utils (npm)

MAL-2026-4505

Malicious code in carvus-lens (npm)

MAL-2026-4643

Malicious code in polymarket-clob-client (npm)

MAL-2026-4443

Malicious code in @shinzepelly/libsignal-node (npm)

MAL-2026-4452

Malicious code in @tailwind-core/webpack (npm)

MAL-2026-4446

Malicious code in @solarcraft/observix (npm)

MAL-2026-4571

Malicious code in get-deps-path (npm)

MAL-2026-4559

Malicious code in fca-eryxenx (npm)

MAL-2026-4543

Malicious code in customerdigital-ui-containers-lib (npm)

MAL-2026-4532

Malicious code in code-tool-langfuse (npm)

MAL-2026-4579

Malicious code in hpsetup (npm)

MAL-2026-4591

Malicious code in jsonbson (npm)

MAL-2026-4407

Malicious code in @mcpassure/mcp-cnes (npm)

MAL-2026-4406

Malicious code in @mcpassure/mcp-anvisa-bulario (npm)

MAL-2026-4427

Malicious code in @rocketreach/rr-components (npm)

MAL-2026-4450

Malicious code in @tailwind-core/postcss (npm)

MAL-2026-4542

Malicious code in crypto-javascript (npm)

MAL-2026-4451

Malicious code in @tailwind-core/vite (npm)

MAL-2026-4602

Malicious code in lokal-mcp (npm)

MAL-2026-4694

Malicious code in tubebrain (npm)

MAL-2026-4693

Malicious code in to-cms (npm)