Supply Chain Incidents

MAL-2026-5832

Malicious code in vend-utilities (npm)

MAL-2026-5802

Malicious code in cardano-addresses-docs (npm)

MAL-2026-5798

Malicious code in @resolvx/core (npm)

MAL-2026-5799

Malicious code in boardflow (npm)

MAL-2026-5800

Malicious code in boardstep (npm)

MAL-2026-5807

Malicious code in sam-package (npm)

MAL-2026-5803

Malicious code in flow-lending (npm)

MAL-2026-5804

Malicious code in flow-lending-sdk (npm)

MAL-2026-5806

Malicious code in flowdefi (npm)

MAL-2026-5808

Malicious code in surf-lending (npm)

MAL-2026-5801

Malicious code in bodega-sdk (npm)

MAL-2026-5805

Malicious code in flowcardano (npm)

MAL-2026-5786

Malicious code in @solana-labs/ancor (npm)

MAL-2026-5787

Malicious code in @solana-labs/spl-toke (npm)

MAL-2026-5788

Malicious code in @solana-labs/web3js (npm)

MAL-2026-5789

Malicious code in claude-cup (npm)

MAL-2026-5791

Malicious code in mddriver (npm)

MAL-2026-5794

Malicious code in neural-network-scan (npm)

MAL-2026-5792

Malicious code in nativescript-swisspost-imagepicker (npm)

MAL-2026-5793

Malicious code in nativescript-swisspost-pcc-creative-editor (npm)

MAL-2026-5790

Malicious code in ldpbootstrap-jquery (npm)

MAL-2026-5777

Malicious code in field-plus (npm)

MAL-2026-5780

Malicious code in ing-feat-itsme-oidc-authentication (npm)

MAL-2026-5781

Malicious code in portal-backend (npm)