Supply Chain Incidents

MAL-2026-6463

Malicious code in abu-common-components (npm)

dttsdee

MAL-2026-6462

Malicious code in dttsdee (npm)

easy-string-kit232

MAL-2026-6461

Malicious code in easy-string-kit232 (npm)

dddooo

MAL-2026-6460

Malicious code in dddooo (npm)

easy-string-kit

MAL-2026-6459

Malicious code in easy-string-kit (npm)

wp-codebox-workspace

MAL-2026-6458

Malicious code in wp-codebox-workspace (npm)

simple-node-calc-c

MAL-2026-6454

Malicious code in simple-node-calc-c (npm)

simple-node-calc-b

MAL-2026-6453

Malicious code in simple-node-calc-b (npm)

simple-node-calc-a

MAL-2026-6451

Malicious code in simple-node-calc-a (npm)

simple-node-calc-aa

MAL-2026-6452

Malicious code in simple-node-calc-aa (npm)

simple-node-calc-ccc

MAL-2026-6455

Malicious code in simple-node-calc-ccc (npm)

subsearch

MAL-2026-6457

Malicious code in subsearch (npm)

stitch-design

MAL-2026-6456

Malicious code in stitch-design (npm)

based-32

MAL-2026-6447

Malicious code in based-32 (npm)

howdybase32

MAL-2026-6449

Malicious code in howdybase32 (npm)

Backdoor

nizzybase32

MAL-2026-6450

Malicious code in nizzybase32 (npm)

Backdoor

base58-core

MAL-2026-6445

Malicious code in base58-core (npm)

bs58-86

MAL-2026-6448

Malicious code in bs58-86 (npm)

Typosquat

base62-86x

MAL-2026-6446

Malicious code in base62-86x (npm)

agentsync-tool

MAL-2026-6444

Malicious code in agentsync-tool (npm)

agentsync-pkg

MAL-2026-6443

Malicious code in agentsync-pkg (npm)

Typosquat

logfmt-core

MAL-2026-6437

Malicious code in logfmt-core (npm)

polymarket-stake-math

MAL-2026-6438

Malicious code in polymarket-stake-math (npm)

polymarket-stake-maths

MAL-2026-6439

Malicious code in polymarket-stake-maths (npm)