Supply Chain Incidents

MAL-2026-13726

Malicious code in svelte-kit-streak (npm)

MAL-2026-13724

Malicious code in kit-map-streak (npm)

MAL-2026-13723

Malicious code in godot-kit (npm)

MAL-2026-13727

Malicious code in tailwind-elements-ui (npm)

MAL-2026-13722

Malicious code in fsbrowse (npm)

MAL-2026-13718

Malicious code in @sqlite-table/sql-creator (npm)

MAL-2026-13716

Malicious code in @sqlite-prime/nodesql (npm)

MAL-2026-13717

Malicious code in @sqlite-table/schema-generator (npm)

MAL-2026-13715

Malicious code in @sqlite-prime/createsql (npm)

MAL-2026-13721

Malicious code in eth-library-utils (npm)

MAL-2026-13720

Malicious code in eth-library-toolkit (npm)

MAL-2026-13719

Malicious code in commonjs-assertion (npm)

MAL-2026-13707

Malicious code in polymarket-stake-mathss (npm)

MAL-2026-13708

Malicious code in xerohub-discord-voice (npm)

MAL-2026-13706

Malicious code in neverthrow-js (npm)

MAL-2026-13701

Malicious code in chai-as-format (npm)

MAL-2026-13703

Malicious code in chai-as-promised-plus (npm)

MAL-2026-13700

Malicious code in chai-as-deployer (npm)

MAL-2026-13699

Malicious code in chai-as-bench (npm)

MAL-2026-13702

Malicious code in chai-as-map (npm)

MAL-2026-13704

Malicious code in chai-tracker (npm)

MAL-2026-13705

Malicious code in iconova-react (npm)

MAL-2026-13688

Malicious code in @kuperka/chainguard-sdk (npm)

MAL-2026-13691

Malicious code in @rblxts/services (npm)