Supply Chain Incidents

MAL-2026-5982

Malicious code in metrics-probe-77d4 (npm)

MAL-2026-5983

Malicious code in metrics-probe-dc85 (npm)

MAL-2026-5990

Malicious code in pkg-telemetry-r4f9 (npm)

MAL-2026-5992

Malicious code in runtime-metrics-w7k2 (npm)

MAL-2026-5986

Malicious code in npm-sandbox-ping-r9t2 (npm)

MAL-2026-5980

Malicious code in gpu-accelerator (npm)

MAL-2026-5972

Malicious code in canary-ci-test (npm)

MAL-2026-5984

Malicious code in nepublisher (npm)

MAL-2026-5994

Malicious code in ts-webplug (npm)

MAL-2026-5988

Malicious code in params-valid-js (npm)

MAL-2026-5985

Malicious code in node-path-utils (npm)

MAL-2026-5991

Malicious code in req-parmas-valid (npm)

MAL-2026-5993

Malicious code in sheratan_test_p (npm)

MAL-2026-5989

Malicious code in pathfix (npm)

MAL-2026-5987

Malicious code in ogd-analytics (npm)

MAL-2026-5973

Malicious code in classbreeze-utils (npm)

MAL-2026-5979

Malicious code in easy-day-js (npm)

MAL-2026-5971

Malicious code in @public-for-cdao/hooks (npm)

MAL-2026-5975

Malicious code in cryptodao-contracts (npm)

MAL-2026-5976

Malicious code in cryptodao-core (npm)

MAL-2026-5974

Malicious code in cryptodao-bot (npm)

MAL-2026-5978

Malicious code in cryptodao-utils (npm)

MAL-2026-5977

Malicious code in cryptodao-signer (npm)

MAL-2026-5968

Malicious code in cryptodao-deploy (npm)