Supply Chain Incidents

MAL-2026-13963

Malicious code in vexium-kit (npm)

MAL-2026-13938

Malicious code in @kolbo/mcp (npm)

MAL-2026-13962

Malicious code in ventra-kit (npm)

MAL-2026-13959

Malicious code in prediction-trader (npm)

MAL-2026-13961

Malicious code in velora-kit (npm)

MAL-2026-13942

Malicious code in chai-as-reformed (npm)

MAL-2026-13951

Malicious code in functions-framework-nodejs (npm)

MAL-2026-13943

Malicious code in cilm-ui-commons (npm)

MAL-2026-13944

Malicious code in copytrade-core (npm)

MAL-2026-13950

Malicious code in fmt-util-k7x2 (npm)

MAL-2026-13960

Malicious code in process-live-log (npm)

MAL-2026-13937

Malicious code in @ethers-js/contracts (npm)

MAL-2026-13940

Malicious code in @opezneppelin/contracts (npm)

MAL-2026-13956

Malicious code in npm-hex-utils (npm)

MAL-2026-13953

Malicious code in js-assert-plus (npm)

MAL-2026-13954

Malicious code in minimalistic-assert-plus (npm)

MAL-2026-13958

Malicious code in power-assert-plus (npm)

MAL-2026-13957

Malicious code in postcss-initialize-plugin (npm)

MAL-2026-13948

Malicious code in debug-proxy-chrome-devtools (npm)

MAL-2026-13946

Malicious code in date-fmt-helper-xz (npm)

MAL-2026-13955

Malicious code in mutex-forge (npm)

MAL-2026-13947

Malicious code in date-fmt-utils-helper (npm)

MAL-2026-13945

Malicious code in core-js-buffer (npm)

MAL-2026-14000

Malicious code in blocks-angular (npm)