Supply Chain Incidents

MAL-2026-10579

Malicious code in bimi-maker (npm)

MAL-2026-10580

Malicious code in ethers-core (npm)

MAL-2026-10581

Malicious code in process-status-widget (npm)

MAL-2026-10578

Malicious code in @sqlite-group/sql-creator (npm)

MAL-2026-10577

Malicious code in @sqlite-clone/nodesql (npm)

MAL-2026-10571

Malicious code in @wrenfield/viem (npm)

MAL-2026-10574

Malicious code in vite-plugin-config-paths (npm)

MAL-2026-10573

Malicious code in harpoon-package (npm)

MAL-2026-10575

Malicious code in web-pop (npm)

MAL-2026-10572

Malicious code in eth-wallet-helpers (npm)

MAL-2026-10558

Malicious code in akshajrawat.utils (npm)

MAL-2026-10554

Malicious code in @akshajrawat/plugin-repo-cli (npm)

MAL-2026-10552

Malicious code in eth-dev (npm)

MAL-2026-10549

Malicious code in abi-encode (npm)

MAL-2026-10557

Malicious code in @cw-ui/micro-ui-loader (npm)

MAL-2026-10564

Malicious code in micro-ui-loader (npm)

MAL-2026-10556

Malicious code in @cw-ui/asio-neon-themes (npm)

MAL-2026-10551

Malicious code in elsisi-cli (npm)

MAL-2026-10553

Malicious code in home-mp-commons (npm)

MAL-2026-10559

Malicious code in avatar-forge (npm)

MAL-2026-10568

Malicious code in sync-logger (npm)

MAL-2026-10567

Malicious code in string-morph (npm)

MAL-2026-10561

Malicious code in dom-weave (npm)

MAL-2026-10566

Malicious code in sight-bind (npm)