Supply Chain Incidents

MAL-2026-3717

Malicious code in truffle-js (npm)

hardhat-common

MAL-2026-3712

Malicious code in hardhat-common (npm)

hardhat-core

MAL-2026-3713

Malicious code in hardhat-core (npm)

ethers-io

MAL-2026-3708

Malicious code in ethers-io (npm)

solc-helper

MAL-2026-3715

Malicious code in solc-helper (npm)

ethers-common

MAL-2026-3707

Malicious code in ethers-common (npm)

truffle-helper

MAL-2026-3716

Malicious code in truffle-helper (npm)

web3-common

MAL-2026-3718

Malicious code in web3-common (npm)

web3-core-js

MAL-2026-3719

Malicious code in web3-core-js (npm)

@dropout-ai/runtime

MAL-2026-3683

Malicious code in @dropout-ai/runtime (npm)

@design-system-coopeuch/web

MAL-2026-3653

Malicious code in @design-system-coopeuch/web (npm)

auth-javascript

MAL-2026-3648

Malicious code in auth-javascript (npm)

iceberg-javascript

MAL-2026-3649

Malicious code in iceberg-javascript (npm)

ms-graph-types

MAL-2026-3651

Malicious code in ms-graph-types (npm)

Typosquat

supabase-javascript

MAL-2026-3652

Malicious code in supabase-javascript (npm)

microsoft-applicationinsights-common

MAL-2026-3650

Malicious code in microsoft-applicationinsights-common (npm)

Typosquat

@gusmano/reext

MAL-2026-3684

Malicious code in @gusmano/reext (npm)

afk-react-intl

MAL-2026-3616

Malicious code in afk-react-intl (npm)

katal-platform-versions

MAL-2026-3617

Malicious code in katal-platform-versions (npm)

@a91082900/test_package

MAL-2026-3680

Malicious code in @a91082900/test_package (npm)

aoflmkt

MAL-2026-3614

Malicious code in aoflmkt (npm)

aoflcorp

MAL-2026-3613

Malicious code in aoflcorp (npm)

justenv

MAL-2026-3611

Malicious code in justenv (npm)

jwscube

MAL-2026-3612

Malicious code in jwscube (npm)