Supply Chain Incidents

MAL-2026-5806

Malicious code in flowdefi (npm)

MAL-2026-5808

Malicious code in surf-lending (npm)

MAL-2026-5801

Malicious code in bodega-sdk (npm)

MAL-2026-5805

Malicious code in flowcardano (npm)

MAL-2026-5786

Malicious code in @solana-labs/ancor (npm)

MAL-2026-5787

Malicious code in @solana-labs/spl-toke (npm)

MAL-2026-5788

Malicious code in @solana-labs/web3js (npm)

MAL-2026-5789

Malicious code in claude-cup (npm)

MAL-2026-5791

Malicious code in mddriver (npm)

MAL-2026-5794

Malicious code in neural-network-scan (npm)

MAL-2026-5792

Malicious code in nativescript-swisspost-imagepicker (npm)

MAL-2026-5793

Malicious code in nativescript-swisspost-pcc-creative-editor (npm)

MAL-2026-5790

Malicious code in ldpbootstrap-jquery (npm)

MAL-2026-5777

Malicious code in field-plus (npm)

MAL-2026-5780

Malicious code in ing-feat-itsme-oidc-authentication (npm)

MAL-2026-5781

Malicious code in portal-backend (npm)

MAL-2026-5782

Malicious code in token-prices-cron (npm)

MAL-2026-5784

Malicious code in vaults-monitor-cron (npm)

MAL-2026-5779

Malicious code in hemi-supply-cron (npm)

MAL-2026-5778

Malicious code in hemi-earn-actions (npm)

MAL-2026-5783

Malicious code in vault-strategies (npm)

MAL-2026-5785

Malicious code in ve-hemi-rewards (npm)

MAL-2026-5774

Malicious code in um4r719-baileys (npm)

MAL-2026-5772

Malicious code in npx-whoami-demo (npm)