Supply Chain Incidents

MAL-2026-10585

Malicious code in cheeriobox (npm)

MAL-2026-10593

Malicious code in twiliobox (npm)

MAL-2026-10590

Malicious code in openaiwrapper (npm)

MAL-2026-10592

Malicious code in stripedev (npm)

MAL-2026-10586

Malicious code in crypto-validate-lib (npm)

MAL-2026-10591

Malicious code in solana-key-utils (npm)

MAL-2026-10579

Malicious code in bimi-maker (npm)

MAL-2026-10580

Malicious code in ethers-core (npm)

MAL-2026-10581

Malicious code in process-status-widget (npm)

MAL-2026-10578

Malicious code in @sqlite-group/sql-creator (npm)

MAL-2026-10577

Malicious code in @sqlite-clone/nodesql (npm)

MAL-2026-10571

Malicious code in @wrenfield/viem (npm)

MAL-2026-10574

Malicious code in vite-plugin-config-paths (npm)

MAL-2026-10573

Malicious code in harpoon-package (npm)

MAL-2026-10575

Malicious code in web-pop (npm)

MAL-2026-10572

Malicious code in eth-wallet-helpers (npm)

MAL-2026-10558

Malicious code in akshajrawat.utils (npm)

MAL-2026-10554

Malicious code in @akshajrawat/plugin-repo-cli (npm)

MAL-2026-10552

Malicious code in eth-dev (npm)

MAL-2026-10549

Malicious code in abi-encode (npm)

MAL-2026-10557

Malicious code in @cw-ui/micro-ui-loader (npm)

MAL-2026-10556

Malicious code in @cw-ui/asio-neon-themes (npm)

MAL-2026-10564

Malicious code in micro-ui-loader (npm)

MAL-2026-10551

Malicious code in elsisi-cli (npm)