GitHub Advisory Database15 days ago

44 malicious packages published on 2026-10-23 (pypi 25, npm 19)

Including: @k18k/entrypoint-sdk-darwin-arm64, orqiva-runtime-win32-x64, @k18k/entrypoint-sdk-linux-x64, @k18k/entrypoint-sdk-darwin-x64, taskquay, workslip, runpier, thornqueue…

Published October 23, 2026 · 10:05 PM
Including: @k18k/entrypoint-sdk-darwin-arm64, orqiva-runtime-win32-x64, @k18k/entrypoint-sdk-linux-x64, @k18k/entrypoint-sdk-darwin-x64, taskquay, workslip, runpier, thornqueue…

Source: GitHub Advisory Database

Ask AI about this articleBeta

The AI only has access to this article — it won't make up facts. Try:

AI can be wrong. Cross-check before sharing.

Supporting evidence0 items
Community check0 comments
No votes yet
0% real0% fake