Supply Chain Incidents

MAL-2026-5347

Malicious code in moustick (npm)

MAL-2026-5346

Malicious code in cookie-parser-legacy (npm)

MAL-2026-5348

Malicious code in os-ulid-void (npm)

MAL-2026-5344

Malicious code in @bancolonbia/menu-filter-widget-web (npm)

MAL-2026-5357

Malicious code in farming-tools-12 (npm)

MAL-2026-5354

Malicious code in defi-tools-39 (npm)

MAL-2026-5359

Malicious code in swap-sdk-87 (npm)

MAL-2026-5360

Malicious code in wallet-sdk-9 (npm)

MAL-2026-5356

Malicious code in ethereum-kit-9 (npm)

MAL-2026-5353

Malicious code in crypto-utils-7 (npm)

MAL-2026-5355

Malicious code in ethereum-kit-1 (npm)

MAL-2026-5352

Malicious code in blockchain-helper-0 (npm)

MAL-2026-5351

Malicious code in @demica/shared (npm)

MAL-2026-5350

Malicious code in @demica/resources (npm)

MAL-2026-5349

Malicious code in @demica/core (npm)

MAL-2026-5358

Malicious code in solana-core-4 (npm)

MAL-2026-5361

Malicious code in web3-tools-9 (npm)

MAL-2026-5341

Malicious code in void-ulid (npm)

MAL-2026-5328

Malicious code in @zimmo/last_search (npm)

MAL-2026-5327

Malicious code in @listings/energy-labels (npm)

MAL-2026-5365

Malicious code in quickwinston (npm)

MAL-2026-5307

Malicious code in classwind-utils (npm)

MAL-2026-5309

Malicious code in nodemon-lint (npm)

MAL-2026-5310

Malicious code in regexp-ts (npm)