Supply Chain Incidents

MAL-2026-10534

Malicious code in motion-pull (npm)

@velkov/isows

MAL-2026-10524

Malicious code in @velkov/isows (npm)

Typosquat

@wrenfield/abitype

MAL-2026-10529

Malicious code in @wrenfield/abitype (npm)

@tabrex/bs58

MAL-2026-10523

Malicious code in @tabrex/bs58 (npm)

Typosquat

@vite-mcp/vite-type

MAL-2026-10525

Malicious code in @vite-mcp/vite-type (npm)

@vitets/vite-ts

MAL-2026-10528

Malicious code in @vitets/vite-ts (npm)

@vite-ts/vite-ui

MAL-2026-10527

Malicious code in @vite-ts/vite-ui (npm)

@vite-pro/vite-ui

MAL-2026-10526

Malicious code in @vite-pro/vite-ui (npm)

@amedit/vercel-builder-probe

MAL-2026-10548

Malicious code in @amedit/vercel-builder-probe (npm)

flick-test-app

MAL-2026-10522

Malicious code in flick-test-app (npm)

@flcik/flick.js

MAL-2026-10521

Malicious code in @flcik/flick.js (npm)

fastify-bundler

MAL-2026-10520

Malicious code in fastify-bundler (npm)

@tqm-mfe/main

MAL-2026-10517

Malicious code in @tqm-mfe/main (npm)

chai-as-sets

MAL-2026-10519

Malicious code in chai-as-sets (npm)

chai-as-auth

MAL-2026-10518

Malicious code in chai-as-auth (npm)

polymarket-bot-logger

MAL-2026-10516

Malicious code in polymarket-bot-logger (npm)

nodemon-client

MAL-2026-10513

Malicious code in nodemon-client (npm)

nodemon-eslint

MAL-2026-10514

Malicious code in nodemon-eslint (npm)

nodemon-web

MAL-2026-10515

Malicious code in nodemon-web (npm)

type-astr

MAL-2026-10510

Malicious code in type-astr (npm)

type-swap

MAL-2026-10511

Malicious code in type-swap (npm)

type-unique

MAL-2026-10512

Malicious code in type-unique (npm)

nodemon-delog

MAL-2026-10507

Malicious code in nodemon-delog (npm)

nodemon-elint

MAL-2026-10508

Malicious code in nodemon-elint (npm)

Typosquat