Supply Chain Incidents

MAL-2026-3876

Malicious code in @antv/dw-random (npm)

MAL-2026-3941

Malicious code in @antv/g-plugin-device-renderer (npm)

MAL-2026-3830

Malicious code in @zentrafinance/contracts (npm)

MAL-2026-3831

Malicious code in citrea-utils (npm)

MAL-2026-3832

Malicious code in zentra-finance (npm)

MAL-2026-3833

Malicious code in zentra-sdk (npm)

MAL-2026-3836

Malicious code in ctf-flare (npm)

MAL-2026-3825

Malicious code in safe-env-reader (npm)

MAL-2026-3827

Malicious code in string-manipulation-typescript (npm)

MAL-2026-3823

Malicious code in parse-escape-regex-string (npm)

MAL-2026-3824

Malicious code in parse-regex-string (npm)

MAL-2026-3826

Malicious code in secure-env-loader (npm)

MAL-2026-3828

Malicious code in validate-api-key (npm)

MAL-2026-3812

Malicious code in @easytipsportal/node-helper (npm)

MAL-2026-3811

Malicious code in claude-code-base-action (npm)

MAL-2026-3810

Malicious code in @pluxee-connect/account-db-api-client (npm)

MAL-2026-3822

Malicious code in clementine-sdk (npm)

MAL-2026-3813

Malicious code in @zentrafinance/protocol-config (npm)

MAL-2026-3821

Malicious code in citrea-sdk (npm)

MAL-2026-3820

Malicious code in citrea-bridge (npm)

MAL-2026-3809

Malicious code in @tc-core/campus-service (npm)

MAL-2026-3808

Malicious code in @citi-icg-158830/icgds-react-css (npm)

MAL-2026-3807

Malicious code in @citi-icg-158830/elemental-ui-react (npm)

MAL-2026-3806

Malicious code in @citi-icg-158830/elemental-chameleon (npm)