Supply Chain Incidents

MAL-2026-14382

Malicious code in @sdgdfgdfhhhfd/chainvista (npm)

MAL-2026-14380

Malicious code in fund-list-filter (npm)

MAL-2026-14381

Malicious code in fund-portfolio (npm)

MAL-2026-14362

Malicious code in 10-shardsight-web (npm)

MAL-2026-14363

Malicious code in 2-loadsight-web (npm)

MAL-2026-14364

Malicious code in 3-buildsight-web (npm)

MAL-2026-14366

Malicious code in 8-fetchsight-web (npm)

MAL-2026-14365

Malicious code in 6-viewsight-web (npm)

MAL-2026-14370

Malicious code in @usaa-grp-personal-profile/personal-profile-common (npm)

MAL-2026-14368

Malicious code in @syncraft-labs/react (npm)

MAL-2026-14372

Malicious code in create-coin (npm)

MAL-2026-14369

Malicious code in @syncraft-labs/vue (npm)

MAL-2026-14367

Malicious code in @syncraft-labs/core (npm)

MAL-2026-14371

Malicious code in chai-as-testkit (npm)

MAL-2026-14374

Malicious code in rust-testing-utils (npm)

MAL-2026-14375

Malicious code in solidity-testing-utils (npm)

MAL-2026-14373

Malicious code in hatdhat-testkit (npm)

MAL-2026-14378

Malicious code in stillm4ddpocs-rtest-bravo (npm)

MAL-2026-14376

Malicious code in stillm4ddpocs-demo-sprocket (npm)

MAL-2026-14377

Malicious code in stillm4ddpocs-rtest-alpha (npm)

MAL-2026-14379

Malicious code in totp-utils (npm)

MAL-2026-14580

Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

MAL-2026-14361

Malicious code in stillm4ddpocs-demo-gadget (npm)

MAL-2026-14360

Malicious code in stillm4ddpocs-demo-widget (npm)