Late-October malware advisory flood

What happened

• 112 GitHub malware advisories covering 106 packages (96 npm, 10 PyPI) between 26 and 28 Oct 2026. This is an advisory count, not confirmed hijacks.

Sources

• https://safeguard.sh/resources/blog/106-malicious-npm-and-pypi-packages-october-2026-what-they-did-and-how-to-block-the-next-batch

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.