Supply Chain Incidents

MAL-2026-11477

Malicious code in refbase-mcp (npm)

MAL-2026-11472

Malicious code in mcp-server-boilerplate (npm)

MAL-2026-11469

Malicious code in iwomm-mcp (npm)

MAL-2026-11474

Malicious code in paraglide-js (npm)

MAL-2026-11459

Malicious code in community-published (npm)

MAL-2026-11458

Malicious code in chaos-mcp (npm)

MAL-2026-11464

Malicious code in gtm-mcp-auth (npm)

MAL-2026-11460

Malicious code in create-remotion (npm)

MAL-2026-11482

Malicious code in sap-mcp-facilitator (npm)

MAL-2026-11471

Malicious code in maximumsats-mcp (npm)

MAL-2026-11453

Malicious code in adpanel-core (npm)

MAL-2026-11481

Malicious code in sap-mcp-config (npm)

MAL-2026-11456

Malicious code in attio-discover (npm)

MAL-2026-11457

Malicious code in capacitor-assets (npm)

MAL-2026-11465

Malicious code in hazmat-cfr (npm)

MAL-2026-11470

Malicious code in kip-mcp-http (npm)

MAL-2026-11475

Malicious code in pm-claude-skills-mcp (npm)

MAL-2026-11462

Malicious code in fast-csv-helper (npm)

MAL-2026-11486

Malicious code in smart-npv-mcp (npm)

MAL-2026-11468

Malicious code in install-native-host (npm)

MAL-2026-11463

Malicious code in goldenflow-js (npm)

MAL-2026-11476

Malicious code in polyprompt (npm)

MAL-2026-11480

Malicious code in routerbase-mcp (npm)

MAL-2026-11467

Malicious code in iac-scanner (npm)