Daily brief
Monday 19 Oct 2026
32 supply chain compromises.
Supply chain compromises
- Malicious release fabdeploycheck 0.1.1 on PyPI was a malicious releasefabdeploycheck 0.1.1
- Malicious release fabtoolkit 0.1.2, 0.1.1, 0.1.0 on PyPI was a malicious releasefabtoolkit 0.1.2, 0.1.1, 0.1.0, 0.2.1
- Malicious release @fcsmc/commercial-analytics 99.9.1 on npm was a malicious release@fcsmc/commercial-analytics 99.9.1
- Malicious release @fmr-ap149494/apex-base-component 99.9.1 on npm was a malicious release@fmr-ap149494/apex-base-component 99.9.1
- Malicious release vinted-mocked-apis 99.0.0 on PyPI was a malicious releasevinted-mocked-apis 99.0.0
- Malicious release asurion 99.0.0 on PyPI was a malicious releaseasurion 99.0.0
- Malicious release animate-tailwind-kit 3.0.1, 3.0.4 on npm was a malicious releaseanimate-tailwind-kit 3.0.1, 3.0.4
- Malicious release animate-twcss-bridge 2.0.6 on npm was a malicious releaseanimate-twcss-bridge 2.0.6
- Malicious release animate-twcss-pack 2.0.6 on npm was a malicious releaseanimate-twcss-pack 2.0.6
- Malicious release animatecss-tailwind-binary 2.0.6 on npm was a malicious releaseanimatecss-tailwind-binary 2.0.6
- Malicious release animatecss-tailwind-graphic 2.0.6 on npm was a malicious releaseanimatecss-tailwind-graphic 2.0.6
- Malicious release animatecss-tailwind-helper 2.0.6 on npm was a malicious releaseanimatecss-tailwind-helper 2.0.6
- Malicious release animatecss-tailwind-luminary 2.0.6, 2.0.7 on npm was a malicious releaseanimatecss-tailwind-luminary 2.0.6, 2.0.7
- Malicious release animatecss-tailwind-plugin 2.0.6 on npm was a malicious releaseanimatecss-tailwind-plugin 2.0.6
- Malicious release animatecss-tailwind-presets 1.0.0, 2.0.3 on npm was a malicious releaseanimatecss-tailwind-presets 1.0.0, 2.0.3
- Malicious release animatecss-tailwind-vectrix 2.0.6, 2.0.7 on npm was a malicious releaseanimatecss-tailwind-vectrix 2.0.6, 2.0.7
- Malicious release signalledger-bridge 2.0.6 on npm was a malicious releasesignalledger-bridge 2.0.6
- Malicious release signalledger-diagnostics 2.0.6 on npm was a malicious releasesignalledger-diagnostics 2.0.6
- Malicious release tailwind-animaflow-kit 2.0.6 on npm was a malicious releasetailwind-animaflow-kit 2.0.6
- Malicious release tailwind-animate-kit 2.0.6, 2.0.7, 2.0.8 on npm was a malicious releasetailwind-animate-kit 2.0.6, 2.0.7, 2.0.8
- Malicious release tailwind-animatecss-kit 2.0.6 on npm was a malicious releasetailwind-animatecss-kit 2.0.6
- Malicious release tailwind-animationlab 2.0.6 on npm was a malicious releasetailwind-animationlab 2.0.6
- Malicious release tailwind-css-keyframes 1.0.7 on npm was a malicious releasetailwind-css-keyframes 1.0.7
- Malicious release tailwind-fabric 3.0.1, 3.0.4 on npm was a malicious releasetailwind-fabric 3.0.1, 3.0.4
- Malicious release tailwind-keyframes 2.0.6 on npm was a malicious releasetailwind-keyframes 2.0.6
- Malicious release tailwind-kinetic 2.0.6, 2.0.8 on npm was a malicious releasetailwind-kinetic 2.0.6, 2.0.8
- Malicious release tailwindcss-animate-catalog 2.0.6, 2.0.7 on npm was a malicious releasetailwindcss-animate-catalog 2.0.6, 2.0.7
- Malicious release tailwindcss-animatemotion 1.0.7 on npm was a malicious releasetailwindcss-animatemotion 1.0.7
- Malicious release tailwindcss-effect-lab 0.0.0-stage, 1.6.7 on npm was a malicious releasetailwindcss-effect-lab 0.0.0-stage, 1.6.7
- Malicious release tailwindcss-keyframe-kit 3.0.0, 3.0.1, 3.0.2 on npm was a malicious releasetailwindcss-keyframe-kit 3.0.0, 3.0.1, 3.0.2
- Malicious release tailwindcss-motionanimate 1.0.1 on npm was a malicious releasetailwindcss-motionanimate 1.0.1
- Malicious release tailwindcss-visual-kit 0.0.0-stage, 1.3.6 on npm was a malicious releasetailwindcss-visual-kit 0.0.0-stage, 1.3.6
10-2410-2310-2210-2110-2010-1910-1810-1710-1610-1510-1410-1310-1210-11Atom feedJSON