Supply Chain Incidents

MAL-2026-4783

Malicious code in @iola_adm/iola-cli (npm)

MAL-2026-4785

Malicious code in test-nonmal-pkg-5 (npm)

MAL-2026-4779

Malicious code in ether-bn.js (npm)

MAL-2026-4780

Malicious code in reasonix-plugmem (npm)

MAL-2026-4781

Malicious code in unique-id-64 (npm)

MAL-2026-4778

Malicious code in 1cat-tunnel-client-zx (npm)

MAL-2026-4356

Malicious code in testing-on-npmjs (npm)

MAL-2026-4711

Malicious code in wao (npm)

MAL-2026-4720

Malicious code in weavedb-lite (npm)

MAL-2026-4727

Malicious code in weavedb-warp-contracts-plugin-deploy (npm)

MAL-2026-4717

Malicious code in weavedb-console (npm)

MAL-2026-4724

Malicious code in weavedb-sdk-base (npm)

MAL-2026-4718

Malicious code in weavedb-exm-sdk (npm)

MAL-2026-4538

Malicious code in create-arnext-app (npm)

MAL-2026-4483

Malicious code in arnext-arkb (npm)

MAL-2026-4663

Malicious code in roidjs (npm)

MAL-2026-4690

Malicious code in test-weavedb-sdk (npm)

MAL-2026-4482

Malicious code in arnext (npm)

MAL-2026-4716

Malicious code in weavedb-client (npm)

MAL-2026-4486

Malicious code in atomic-notes (npm)

MAL-2026-4722

Malicious code in weavedb-offchain (npm)

MAL-2026-4476

Malicious code in ai3 (npm)

MAL-2026-4719

Malicious code in weavedb-exm-sdk-web (npm)

MAL-2026-4546

Malicious code in cwao-units (npm)