Supply Chain Incidents

MAL-2026-4332

Malicious code in unique-string-64 (npm)

MAL-2026-4321

Malicious code in motion-ui-tool (npm)

MAL-2026-4311

Malicious code in explorhub-claude-bridge (npm)

MAL-2026-4312

Malicious code in explorhub-mcp-server (npm)

MAL-2026-4309

Malicious code in eh-bridge-utils (npm)

MAL-2026-4313

Malicious code in explorhub-sdk (npm)

MAL-2026-4310

Malicious code in explorhub-ai-agent (npm)

MAL-2026-4308

Malicious code in core-utility-tools (npm)

MAL-2026-4300

Malicious code in apple-app-store-server-library-v3 (npm)

MAL-2026-4315

Malicious code in flownodelp5 (npm)

MAL-2026-4343

Malicious code in wnba-parent (npm)

MAL-2026-4320

Malicious code in mobile-international (npm)

MAL-2026-4322

Malicious code in nba-blocker-plugin (npm)

MAL-2026-4323

Malicious code in nba-cdn-plugin (npm)

MAL-2026-4338

Malicious code in wm-plugin-json-conditions (npm)

MAL-2026-4337

Malicious code in wm-plugin-create-iframe-capturing (npm)

MAL-2026-4339

Malicious code in wm-plugin-native-functions-restorer (npm)

MAL-2026-4342

Malicious code in wm-w5g-preview (npm)

MAL-2026-4341

Malicious code in wm-plugin-set-walkme-language (npm)

MAL-2026-4340

Malicious code in wm-plugin-open-teach-me-after-deployable-played (npm)

MAL-2026-4359

Malicious code in @agora-sdk/react-js (npm)

MAL-2026-4318

Malicious code in levex-press (npm)

MAL-2026-4324

Malicious code in ts-big-lib (npm)

MAL-2026-4319

Malicious code in lint-builder-logger (npm)