The Software Supply Chain Malware Landscape: January - May 2026

This blog analyzes the software supply chain malware landscape (Jan–May 2026), identifying three key trends: parallel growth of malicious packages in npm and PyPI, rising account takeovers alongside dependency confusion and typosquatting attacks, and proliferation of malicious AI skills in ClawHub that targeted a diverse set of victims including non-developers.