MAL-2026-11834 Malicious code in @servicetitan/carto-charts-rn (npm)

npm/@servicetitan/carto-charts-rn is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in @servicetitan/hash-browser-router (npm)

npm/@servicetitan/hash-browser-router is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized a...

MAL-2026-11719 Malicious code in @or-sdk/permissions-lambda (npm)

npm/@or-sdk/permissions-lambda is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...

Malicious code in tkcallendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 091da316c04a67c06230fcacc589735925c578c581ac5e4b53f9559824035fca Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beatifulsoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e5d6d67cb7f40af1c43f206187d0ab3db9afc5850dad8b5263d64b106a47b6d2 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in gitpythn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d3b433c6b7a9af7de2df48e610974b1a2219c6353f656dac1f27078e7ad4ab7b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pycodstyle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e37409883475fe42170564e5e15e545bd75c3a4bce9d9c7b4b7d426a21274caa Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolkkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c4c251d3a780df7d6fe90e182237b6e011ea4e21c2e694611658bd6e4c278689 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prmopt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0ee7ba5aaf4be0952abc2bada752ea586dd24ffc7cd0fe61f5d852f7273f08b2 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in rompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8c684bba24789cbcdaff1b6f9a248717997f424fdd9b342273a46b798501a3dc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1261c75a8d1e3798424e001e837db3aa3146f10d5c703718cc3d3237ea5b4024 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progessbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ea84655a6bdf22367da8b19f14ddad7fd954647aea7d9a1898691d1b33e36d37 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in proressbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f11c4702116e59a5d221bdb8e12d7ded5540de75ca00174b50112491f24fdee8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progrssbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bcb7b07885bb95e21bb02e7c2f36b0b86a816d5d7c209b8d77d0c06444e5d4f1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in psutill (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 335e25f0be41a55bc0683902b4fc0d51cb5b941bfcdf1610fbab796b62f9c620 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discodr-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1b1fba7f335a1d5155e39d67f0f91756aec2b070b6d17062fb91a603704201c6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in disocrd-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d1914480490a47e91f61ee6103eece5db5e442f9b77a1c70b4f009a8774e810b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-tolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 95c91eb5e8c5936572f70b8fedc4f4ccbff061ba58be32a73186b2b8342b0008 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in diiscord-webhook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 236e362e04629c82c14aa65876a4f53b9c72fd61598027880b992cf11cc97fe8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requets-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6864037a883ed557f21693efb913b4429ca9b9bd71c7fdcaab7150c6084131fc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...