Supply Chain Incidents

MAL-2026-14217

Malicious code in ai-texts (npm)

mapkit-loader

MAL-2026-14218

Malicious code in mapkit-loader (npm)

Typosquat

setup-codex

MAL-2026-14219

Malicious code in setup-codex (npm)

solidity-hold

MAL-2026-14220

Malicious code in solidity-hold (npm)

ssb-test-package

MAL-2026-14221

Malicious code in ssb-test-package (npm)

Dep Confusion

streak-cal-core

MAL-2026-14222

Malicious code in streak-cal-core (npm)

Typosquat

streak-key-lib

MAL-2026-14223

Malicious code in streak-key-lib (npm)

streak-metric-test

MAL-2026-14224

Malicious code in streak-metric-test (npm)

sui-gql-rpc

MAL-2026-14209

Malicious code in sui-gql-rpc (npm)

sui-graphql-rpc

MAL-2026-14210

Malicious code in sui-graphql-rpc (npm)

timed-assess

MAL-2026-14216

Malicious code in timed-assess (npm)

sysc1

MAL-2026-14214

Malicious code in sysc1 (npm)

sysdo

MAL-2026-14215

Malicious code in sysdo (npm)

syjoy

MAL-2026-14213

Malicious code in syjoy (npm)

syboy

MAL-2026-14212

Malicious code in syboy (npm)

sw-pluginer

MAL-2026-14211

Malicious code in sw-pluginer (npm)

eth-batcher

MAL-2026-14208

Malicious code in eth-batcher (npm)

@lilsccott6x9/devpipe-connector

MAL-2026-14203

Malicious code in @lilsccott6x9/devpipe-connector (npm)

@sarex-team/viewer

MAL-2026-14207

Malicious code in @sarex-team/viewer (npm)

@sarex-team/ui-kit

MAL-2026-14206

Malicious code in @sarex-team/ui-kit (npm)

@sarex-team/sdk-js

MAL-2026-14204

Malicious code in @sarex-team/sdk-js (npm)

@sarex-team/translator

MAL-2026-14205

Malicious code in @sarex-team/translator (npm)

chai-as-gateway

MAL-2026-14200

Malicious code in chai-as-gateway (npm)

chaikit

MAL-2026-14201

Malicious code in chaikit (npm)