Supply Chain Incidents

MAL-2026-14051

Malicious code in @velliajs/discord (npm)

MAL-2026-14095

Malicious code in sui-gql-lite (npm)

MAL-2026-14076

Malicious code in bcs-mini (npm)

MAL-2026-14071

Malicious code in @peptideventure/peptide-score-modifier (npm)

MAL-2026-14072

Malicious code in @peptideventure/peptide-unit (npm)

MAL-2026-14050

Malicious code in @polymarkets/clob-client-v2 (npm)

MAL-2026-14049

Malicious code in @mexc/shared-utils (npm)

MAL-2026-14048

Malicious code in @lodash-js/lodash-js (npm)

MAL-2026-14047

Malicious code in @guangnao/agent-proxy (npm)

MAL-2026-14046

Malicious code in @ghost_debugger/nanocache (npm)

MAL-2026-14045

Malicious code in @ferudionz/webautomation (npm)

MAL-2026-14044

Malicious code in @ferudionz/web_logger_js (npm)

MAL-2026-14043

Malicious code in @divineubg/divine (npm)

MAL-2026-14042

Malicious code in @devmikets/hyperliquid-sdk (npm)

MAL-2026-14041

Malicious code in @demopack/www (npm)

MAL-2026-14039

Malicious code in @cdnshell/loader (npm)

MAL-2026-14040

Malicious code in @workoscalifant/sudoku-term (npm)

MAL-2026-14029

Malicious code in axios-fast (npm)

MAL-2026-14021

Malicious code in alelo-auth (npm)

MAL-2026-14020

Malicious code in alelo-api (npm)

MAL-2026-14026

Malicious code in alelo-sdk (npm)

MAL-2026-14031

Malicious code in datefmt-core-utils (npm)

MAL-2026-14032

Malicious code in datefmt-simple-utils (npm)

MAL-2026-14028

Malicious code in alelo-utils (npm)