Supply Chain Incidents

MAL-2026-4177

Malicious code in did-0091 (npm)

MAL-2026-4740

Malicious code in zod-to-js (npm)

MAL-2026-4701

Malicious code in venturo-playwright-runner (npm)

MAL-2026-4175

Malicious code in collected-forms-embed-js (npm)

MAL-2026-4700

Malicious code in venturo-playwright (npm)

MAL-2026-4362

Malicious code in @arbocollab/arbo-web-people (npm)

MAL-2026-4383

Malicious code in @dknzo/soonex-ai (npm)

MAL-2026-4453

Malicious code in @tarojs/cli (npm)

MAL-2026-4531

Malicious code in clsx-js (npm)

MAL-2026-4732

Malicious code in workrally (npm)

MAL-2026-4501

Malicious code in btd-smart (npm)

MAL-2026-4541

Malicious code in crypto-hash-sdk (npm)

MAL-2026-4734

Malicious code in xorma-js (npm)

MAL-2026-4655

Malicious code in qr-code-styling-temp (npm)

MAL-2026-4478

Malicious code in alya-baileys (npm)

MAL-2026-4729

Malicious code in whiteboard-agent (npm)

MAL-2026-4522

Malicious code in claude-all-config (npm)

MAL-2026-4441

Malicious code in @shadanai/openclaw (npm)

MAL-2026-4370

Malicious code in @bonsai-ai/claude-code (npm)

MAL-2026-4536

Malicious code in corelia (npm)

MAL-2026-4371

Malicious code in @bonsai-ai/claude-code-win32-x64 (npm)

MAL-2026-4628

Malicious code in open-agents-ai (npm)

MAL-2026-4674

Malicious code in superacli (npm)

MAL-2026-4375

Malicious code in @citely/mcp-server (npm)