Supply Chain Incidents

MAL-2026-11036

Malicious code in streak-lib-math (npm)

MAL-2026-11038

Malicious code in svelte-streak-metrics (npm)

MAL-2026-11035

Malicious code in streak-bucket-lib (npm)

MAL-2026-11037

Malicious code in svelte-goal-streak (npm)

MAL-2026-11030

Malicious code in vitest-axios (npm)

MAL-2026-11027

Malicious code in fs-extra-core (npm)

MAL-2026-11024

Malicious code in create-kumo-project (npm)

MAL-2026-11029

Malicious code in lychee-norm-cache (npm)

MAL-2026-11022

Malicious code in aio-commerce-lib-app (npm)

MAL-2026-11028

Malicious code in helix-deploy (npm)

MAL-2026-11025

Malicious code in da-sc-sdk (npm)

MAL-2026-11023

Malicious code in bs58-88 (npm)

MAL-2026-11026

Malicious code in ethers-packge (npm)

MAL-2026-11021

Malicious code in @bcryptln/bcryptjs (npm)

MAL-2026-11020

Malicious code in hardhat-gas-tracker (npm)

MAL-2026-11000

Malicious code in application-util (npm)

MAL-2026-11007

Malicious code in web3-terminal (npm)

MAL-2026-11002

Malicious code in habinger (npm)

MAL-2026-11001

Malicious code in date-format-utils-xz (npm)

MAL-2026-11013

Malicious code in encryptstringadmincore (npm)

MAL-2026-11011

Malicious code in encrypt-string-ttak (npm)

MAL-2026-11012

Malicious code in encryptstringadmin (npm)

MAL-2026-11003

Malicious code in n8n-nodes-net-utils (npm)

MAL-2026-11004

Malicious code in n8n-nodes-pwn (npm)