Supply Chain Incidents

MAL-2026-4455

Malicious code in @thebros/create-benjamin (npm)

MAL-2026-4254

Malicious code in reactive-cdk-app (npm)

MAL-2026-4395

Malicious code in @inetafrica/open-claudia (npm)

MAL-2026-4417

Malicious code in @pisell/pisellos (npm)

MAL-2026-4597

Malicious code in kurumi-fca (npm)

MAL-2026-4387

Malicious code in @euqns/nudge-mcp (npm)

MAL-2026-4572

Malicious code in get-package-lint (npm)

MAL-2026-4671

Malicious code in skipshot-agent (npm)

MAL-2026-4252

Malicious code in @43uh3ig43/telemetry-client (npm)

MAL-2026-4604

Malicious code in lynx-keeper-cli (npm)

MAL-2026-4735

Malicious code in xy-ai-chat (npm)

MAL-2026-4653

Malicious code in qaq-core-util-v2 (npm)

MAL-2026-4497

Malicious code in bingocode (npm)

MAL-2026-4412

Malicious code in @onerjs/procedural-textures (npm)

MAL-2026-4385

Malicious code in @druids/ui (npm)

MAL-2026-4251

Malicious code in harmony-enablers-test-2026 (npm)

MAL-2026-4733

Malicious code in wrld-dev (npm)

MAL-2026-4363

Malicious code in @asura21232/fca-unofficial-nextgen (npm)

MAL-2026-4474

Malicious code in acc-document-editing (npm)

MAL-2026-4444

Malicious code in @shwfed/nuxt (npm)

MAL-2026-4236

Malicious code in dependency-audit-tool (npm)

MAL-2026-4246

Malicious code in python-env-auditor (npm)

MAL-2026-4235

Malicious code in credential-verification-cli (npm)

MAL-2026-4250

Malicious code in wallet-backup-verifier (npm)