Supply Chain Incidents

MAL-2026-4390

Malicious code in @flowselections/core (npm)

MAL-2026-4426

Malicious code in @riteshkumar04/stack-audit (npm)

MAL-2026-4606

Malicious code in martinez-polygon-clipping-tony (npm)

MAL-2026-4757

Malicious code in morin (PyPI)

MAL-2026-4742

Malicious code in aurapro-ui (PyPI)

MAL-2026-4177

Malicious code in did-0091 (npm)

MAL-2026-4741

Malicious code in aurafarmer (PyPI)

MAL-2026-4767

Malicious code in silly-logger (PyPI)

MAL-2026-4761

Malicious code in openirf (PyPI)

MAL-2026-4748

Malicious code in eplang (PyPI)

MAL-2026-4764

Malicious code in pycalendar-api (PyPI)

MAL-2026-4751

Malicious code in glass-of-water (PyPI)

MAL-2026-4758

Malicious code in nebulix-ai (PyPI)

MAL-2026-4766

Malicious code in saas-common-lib-473815 (PyPI)

MAL-2026-4745

Malicious code in clearml-truen-patch (PyPI)

MAL-2026-4740

Malicious code in zod-to-js (npm)

MAL-2026-4769

Malicious code in soundsource (PyPI)

MAL-2026-4743

Malicious code in buddyme (PyPI)

MAL-2026-4765

Malicious code in qontract-reconcile (PyPI)

MAL-2026-4746

Malicious code in crw (PyPI)

MAL-2026-4701

Malicious code in venturo-playwright-runner (npm)

MAL-2026-4175

Malicious code in collected-forms-embed-js (npm)

MAL-2026-4700

Malicious code in venturo-playwright (npm)

MAL-2026-4362

Malicious code in @arbocollab/arbo-web-people (npm)