Supply Chain Incidents

MAL-2026-873

Malicious code in @depro0x/despicable-me (npm)

MAL-2026-872

Malicious code in stylelint-recommended (npm)

MAL-2026-871

Malicious code in envoy1 (npm)

MAL-2026-941

Malicious code in ether-lint (npm)

MAL-2026-870

Malicious code in b10connoisseur (PyPI)

MAL-2026-869

Malicious code in ritch (PyPI)

MAL-2026-866

Malicious code in oraceldb (PyPI)

MAL-2026-863

Malicious code in krbutils (PyPI)

MAL-2026-868

Malicious code in pydantics (PyPI)

MAL-2026-867

Malicious code in pandaai (PyPI)

MAL-2026-865

Malicious code in opentelematry-api (PyPI)

MAL-2026-864

Malicious code in marshmellow (PyPI)

MAL-2026-946

Malicious code in lala6992 (PyPI)

MAL-2026-862

Malicious code in get-incorrect-name-bob (PyPI)

MAL-2026-861

Malicious code in express-gueues (npm)

MAL-2026-860

Malicious code in osopackagepy (PyPI)

MAL-2026-858

Malicious code in systemtest-information (npm)

MAL-2026-857

Malicious code in osopackage (npm)

MAL-2026-859

Malicious code in systemtest-network (npm)

MAL-2026-856

Malicious code in chai-prop (npm)

MAL-2026-855

Malicious code in config-toolkit (PyPI)

MAL-2026-854

Malicious code in sinon-node (npm)

MAL-2026-853

Malicious code in node-dotenv-cli (npm)

MAL-2026-852

Malicious code in chai-await (npm)