Supply Chain Incidents

MAL-2026-10649

Malicious code in @saladin0x1/js-shared-modules (npm)

MAL-2026-10630

Malicious code in chai-as-byte (npm)

MAL-2026-10627

Malicious code in @sqlite-frame/nodesql (npm)

MAL-2026-10626

Malicious code in @react-case/option (npm)

MAL-2026-10637

Malicious code in mc-reg (npm)

MAL-2026-10650

Malicious code in install-skia (npm)

MAL-2026-10651

Malicious code in iwsdk (npm)

MAL-2026-10632

Malicious code in cppt-common (npm)

MAL-2026-10652

Malicious code in json-bigint-extend (npm)

MAL-2026-10619

Malicious code in @vite-js/vui (npm)

MAL-2026-10622

Malicious code in chai-as-structured (npm)

MAL-2026-10621

Malicious code in chai-as-hardened (npm)

MAL-2026-10623

Malicious code in http-ws-listener (npm)

MAL-2026-10620

Malicious code in ahooks-3.7.8 (npm)

MAL-2026-10614

Malicious code in postcss-selector-minify (npm)

MAL-2026-10613

Malicious code in ethereum-lib-utils (npm)

MAL-2026-10612

Malicious code in assertion-utils-js (npm)

MAL-2026-10615

Malicious code in smb-common-uikit (npm)

MAL-2026-10616

Malicious code in smb-portal-uikit (npm)

MAL-2026-10611

Malicious code in @web3-helpers/core (npm)

MAL-2026-10602

Malicious code in @public-for-cdao/config (npm)

MAL-2026-10603

Malicious code in @public-for-cdao/token (npm)

MAL-2026-10599

Malicious code in @public-for-cdao/abi (npm)

MAL-2026-10604

Malicious code in @public-for-cdao/types (npm)