Supply Chain Incidents

MAL-2026-10037

Malicious code in @wagni_bot/web3-toolkit (npm)

MAL-2026-10021

Malicious code in txs-builder-lib (npm)

MAL-2026-10014

Malicious code in nodemon-sudo (npm)

MAL-2026-10019

Malicious code in client-cookies-agent (npm)

MAL-2026-10013

Malicious code in n8n-nodes-mcputils (npm)

MAL-2026-10012

Malicious code in mchain-sdk (npm)

MAL-2026-10009

Malicious code in chain-api-sdk (npm)

MAL-2026-10006

Malicious code in testing-d3do (npm)

MAL-2026-10010

Malicious code in feedback-api (npm)

MAL-2026-10018

Malicious code in security-console-ui (npm)

MAL-2026-10017

Malicious code in rabi-snooze-api (npm)

MAL-2026-10011

Malicious code in fusion-client (npm)

MAL-2026-10007

Malicious code in bizapi-portal (npm)

MAL-2026-10015

Malicious code in poc-node-npm (npm)

MAL-2026-10016

Malicious code in qlkube (npm)

MAL-2026-10008

Malicious code in breeze-feature-flag-poc (npm)

MAL-2026-7027

Malicious code in @calm2026/imux (npm)

MAL-2026-7028

Malicious code in calvuepro (npm)

MAL-2026-7031

Malicious code in clavuepro (npm)

MAL-2026-7032

Malicious code in myclaude-code (npm)

MAL-2026-7030

Malicious code in clavue-agent-sdk (npm)

MAL-2026-7029

Malicious code in clavue (npm)

MAL-2026-7026

Malicious code in tailwind-core (npm)

MAL-2026-11110

Malicious code in @wagni_bot/eth (npm)