Supply Chain Incidents

MAL-2026-10490

Malicious code in @sqlite-panel/createsql (npm)

MAL-2026-10488

Malicious code in permcarmserver (npm)

MAL-2026-10489

Malicious code in permcserver (npm)

MAL-2026-10486

Malicious code in @omniwatch-wick/cli (npm)

MAL-2026-10487

Malicious code in @outsmartly/metaobjects (npm)

MAL-2026-10485

Malicious code in polymarket-stake-kelly-math-check (npm)

MAL-2026-10482

Malicious code in react-icons-svgo (npm)

MAL-2026-10479

Malicious code in node-fsmetrics-data (npm)

MAL-2026-10483

Malicious code in route-processor (npm)

MAL-2026-10480

Malicious code in node-fsmetrics-native (npm)

MAL-2026-10481

Malicious code in polymarket-mcp-v2 (npm)

MAL-2026-10478

Malicious code in @sectest429/hello-npm-world (npm)

MAL-2026-10472

Malicious code in @torbeck/priority-queue (npm)

MAL-2026-10473

Malicious code in claude-team-tracker (npm)

MAL-2026-10475

Malicious code in @dervix/socket.io (npm)

MAL-2026-10474

Malicious code in @dervix/engine.io (npm)

MAL-2026-10476

Malicious code in @gleamkit/engine.io (npm)

MAL-2026-10477

Malicious code in @gleamkit/socket.io (npm)

MAL-2026-10471

Malicious code in loading-sessions (npm)

MAL-2026-10470

Malicious code in @uw010010/vite-tree (npm)

MAL-2026-10469

Malicious code in @sheltr_/agent (npm)

MAL-2026-10455

Malicious code in @origindev/ethaccount (npm)

MAL-2026-10456

Malicious code in @spzhongwin/skill-logger-plugin (npm)

MAL-2026-10468

Malicious code in nodemon-sync (npm)