Supply Chain Incidents

MAL-2026-10479

Malicious code in node-fsmetrics-data (npm)

MAL-2026-10483

Malicious code in route-processor (npm)

MAL-2026-10480

Malicious code in node-fsmetrics-native (npm)

MAL-2026-10481

Malicious code in polymarket-mcp-v2 (npm)

MAL-2026-10478

Malicious code in @sectest429/hello-npm-world (npm)

MAL-2026-10472

Malicious code in @torbeck/priority-queue (npm)

MAL-2026-10473

Malicious code in claude-team-tracker (npm)

MAL-2026-10475

Malicious code in @dervix/socket.io (npm)

MAL-2026-10474

Malicious code in @dervix/engine.io (npm)

MAL-2026-10477

Malicious code in @gleamkit/socket.io (npm)

MAL-2026-10476

Malicious code in @gleamkit/engine.io (npm)

MAL-2026-10471

Malicious code in loading-sessions (npm)

MAL-2026-10470

Malicious code in @uw010010/vite-tree (npm)

MAL-2026-10469

Malicious code in @sheltr_/agent (npm)

MAL-2026-10455

Malicious code in @origindev/ethaccount (npm)

MAL-2026-10456

Malicious code in @spzhongwin/skill-logger-plugin (npm)

MAL-2026-10468

Malicious code in nodemon-sync (npm)

MAL-2026-10462

Malicious code in hehehee (npm)

MAL-2026-10457

Malicious code in cktool-core (npm)

MAL-2026-10466

Malicious code in polymarket-math-stake-kelly (npm)

MAL-2026-10461

Malicious code in gptlite (npm)

MAL-2026-10467

Malicious code in polymarket-stake-kelly-math (npm)

MAL-2026-10458

Malicious code in compliancepolicyserv (npm)

MAL-2026-10459

Malicious code in connectedmerchantsserv (npm)