Supply Chain Incidents

MAL-2026-5573

Malicious code in solana-rpc-pool (npm)

MAL-2026-5574

Malicious code in spotify-url-resolver (npm)

MAL-2026-5575

Malicious code in testzapier (npm)

MAL-2026-5571

Malicious code in qa-handoff (npm)

MAL-2026-5585

Malicious code in polymarket-clob-api (npm)

MAL-2026-5586

Malicious code in tailwind-dark-mode-kit (npm)

MAL-2026-5583

Malicious code in emittery_styled (npm)

MAL-2026-5584

Malicious code in justgetit (npm)

MAL-2026-5547

Malicious code in @403name/electron-buidler (npm)

MAL-2026-5549

Malicious code in @403name/fsevent (npm)

MAL-2026-5548

Malicious code in @403name/ether-js (npm)

MAL-2026-5559

Malicious code in solana-dev-tools (npm)

MAL-2026-5558

Malicious code in sensivity (npm)

MAL-2026-5560

Malicious code in solana-web3-community (npm)

MAL-2026-5556

Malicious code in janus-flow (npm)

MAL-2026-5557

Malicious code in janus-ft (npm)

MAL-2026-5551

Malicious code in @my_name_is_khn/express-security-tool-v1 (npm)

MAL-2026-5552

Malicious code in @my_name_is_khn/express-security-tool-v3 (npm)

MAL-2026-5550

Malicious code in @my_name_is_khn/express-security-tool (npm)

MAL-2026-5555

Malicious code in express-timer (npm)

MAL-2026-5554

Malicious code in express-self-destruct2 (npm)

MAL-2026-5553

Malicious code in express-self-destruct (npm)

MAL-2026-5542

Malicious code in india-map-react (npm)

MAL-2026-5541

Malicious code in @w2d/web-components (npm)