Supply Chain Incidents

MAL-2026-4277

Malicious code in dev-env-bootstrapper (npm)

MAL-2026-4504

Malicious code in cami-design (npm)

MAL-2026-4660

Malicious code in react-malicious-clone (npm)

MAL-2026-4274

Malicious code in power-apps (npm)

MAL-2026-4398

Malicious code in @jonusnattapong/claudecode (npm)

MAL-2026-4697

Malicious code in twokey (npm)

MAL-2026-4708

Malicious code in wallet-agent-ai (npm)

MAL-2026-4577

Malicious code in harness-skil (npm)

MAL-2026-4681

Malicious code in tailwind-typography-stylecss (npm)

MAL-2026-4599

Malicious code in license-checker-plus (npm)

MAL-2026-4672

Malicious code in solidity-coverage-plus (npm)

MAL-2026-4567

Malicious code in freertc (npm)

MAL-2026-4576

Malicious code in hardhat-gas-analytics (npm)

MAL-2026-4630

Malicious code in openprompt-lang (npm)

MAL-2026-4270

Malicious code in clickpy (npm)

MAL-2026-4381

Malicious code in @digicroz/typed-api-kit (npm)

MAL-2026-4287

Malicious code in @audience-common-ui/components (npm)

MAL-2026-4638

Malicious code in pewter-constantstest (npm)

MAL-2026-4268

Malicious code in asavie-ui (npm)

MAL-2026-4384

Malicious code in @dreamlake/lakeshore (npm)

MAL-2026-4267

Malicious code in @newline53/newline-ts-sdk (npm)

MAL-2026-4637

Malicious code in pewter-constants (npm)

MAL-2026-4266

Malicious code in discovery-build (npm)

MAL-2026-4611

Malicious code in midpatch (npm)