Supply Chain Incidents

MAL-2026-4164

Malicious code in identitysecuretokenserv (npm)

MAL-2026-4160

Malicious code in @apps-home-dashboard/events (npm)

MAL-2026-3842

Malicious code in @openclaw-cn/feishu (npm)

MAL-2026-4161

Malicious code in @cap-js/openapi (npm)

MAL-2026-3841

Malicious code in @openclaw-cn/cli (npm)

MAL-2026-3847

Malicious code in openclaw-cn (npm)

MAL-2026-3844

Malicious code in @openclaw-cn/toutiao-ops (npm)

MAL-2026-3843

Malicious code in @openclaw-cn/libsignal (npm)

MAL-2026-3845

Malicious code in @starmind/collector-cli (npm)

MAL-2026-4023

Malicious code in @antv/graphin-components (npm)

MAL-2026-4012

Malicious code in @antv/gi-common-components (npm)

MAL-2026-3903

Malicious code in @antv/f6-element (npm)

MAL-2026-3877

Malicious code in @antv/dw-transform (npm)

MAL-2026-4045

Malicious code in @antv/l7-maps (npm)

MAL-2026-4064

Malicious code in @antv/li-sam-assets (npm)

MAL-2026-4150

Malicious code in react-adsense (npm)

MAL-2026-3859

Malicious code in @antv/chart-visualization-skills (npm)

MAL-2026-4155

Malicious code in timeago-react (npm)

MAL-2026-4011

Malicious code in @antv/gi-cli (npm)

MAL-2026-4105

Malicious code in @antv/x6-plugin-keyboard (npm)

MAL-2026-4136

Malicious code in jest-canvas-mock (npm)

MAL-2026-3978

Malicious code in @antv/g2-plugin-slider (npm)

MAL-2026-3936

Malicious code in @antv/g-plugin-canvas-picker (npm)

MAL-2026-4135

Malicious code in gantt-for-react (npm)