Supply Chain Incidents

MAL-2026-13356

Malicious code in chai-foundry (npm)

MAL-2026-13355

Malicious code in @astralcore/sl-aura (npm)

MAL-2026-13210

Malicious code in @ohos-ports/codex (npm)

MAL-2026-13353

Malicious code in stellarfixer (npm)

MAL-2026-13344

Malicious code in ezfnfix (npm)

MAL-2026-13342

Malicious code in encrypt-string-safe (npm)

MAL-2026-13209

Malicious code in @guangnao/claude-cli (npm)

MAL-2026-13350

Malicious code in native-hello-plugin (npm)

MAL-2026-13217

Malicious code in akamai-sensorv2 (npm)

MAL-2026-13216

Malicious code in akamai-sensorv1 (npm)

MAL-2026-13352

Malicious code in stellar-api-core (npm)

MAL-2026-13347

Malicious code in javas-crypto (npm)

MAL-2026-13348

Malicious code in lakk-analytics (npm)

MAL-2026-13258

Malicious code in bitcoinjs-wallet (npm)

MAL-2026-13277

Malicious code in dlab_workshop (npm)

MAL-2026-13343

Malicious code in ethers-signer (npm)

MAL-2026-13345

Malicious code in hd-key-generator (npm)

MAL-2026-13346

Malicious code in hdkey-wallet (npm)

MAL-2026-13354

Malicious code in web3-utils-crypto (npm)

MAL-2026-13257

Malicious code in bip39-generator (npm)

MAL-2026-13349

Malicious code in mnemonic-to-key (npm)

MAL-2026-13351

Malicious code in spl-token-utils (npm)

MAL-2026-13259

Malicious code in chatcc-agent (npm)

MAL-2026-13219

Malicious code in bigops-insite (npm)