GitHub Advisory Database15 days ago
44 malicious packages published on 2026-10-23 (pypi 25, npm 19)
Including: @k18k/entrypoint-sdk-darwin-arm64, orqiva-runtime-win32-x64, @k18k/entrypoint-sdk-linux-x64, @k18k/entrypoint-sdk-darwin-x64, taskquay, workslip, runpier, thornqueue…
Published October 23, 2026 · 10:05 PM
Including: @k18k/entrypoint-sdk-darwin-arm64, orqiva-runtime-win32-x64, @k18k/entrypoint-sdk-linux-x64, @k18k/entrypoint-sdk-darwin-x64, taskquay, workslip, runpier, thornqueue…
Source: GitHub Advisory Database
Ask AI about this articleBeta
The AI only has access to this article — it won't make up facts. Try:
Supporting evidence0 items
Community check0 comments
No votes yet
0% real0% fake