Supply Chain Incidents

MAL-2026-5374

Malicious code in @doaction/mapstore (npm)

@doaction/http

MAL-2026-5373

Malicious code in @doaction/http (npm)

@doaction/signalhub

MAL-2026-5378

Malicious code in @doaction/signalhub (npm)

@doaction/pay

MAL-2026-5375

Malicious code in @doaction/pay (npm)

@doaction/systeminformation

MAL-2026-5381

Malicious code in @doaction/systeminformation (npm)

@doaction/rrweb-sdk

MAL-2026-5376

Malicious code in @doaction/rrweb-sdk (npm)

@doaction/examples

MAL-2026-5372

Malicious code in @doaction/examples (npm)

@doaction/example

MAL-2026-5371

Malicious code in @doaction/example (npm)

@doaction/shared

MAL-2026-5377

Malicious code in @doaction/shared (npm)

@doaction/auth

MAL-2026-5369

Malicious code in @doaction/auth (npm)

@doaction/eventemitter

MAL-2026-5370

Malicious code in @doaction/eventemitter (npm)

transacts

MAL-2026-5368

Malicious code in transacts (npm)

cookie-parser-legacy

MAL-2026-5346

Malicious code in cookie-parser-legacy (npm)

moustick

MAL-2026-5347

Malicious code in moustick (npm)

os-ulid-void

MAL-2026-5348

Malicious code in os-ulid-void (npm)

@bancolonbia/menu-filter-widget-web

MAL-2026-5344

Malicious code in @bancolonbia/menu-filter-widget-web (npm)

farming-tools-12

MAL-2026-5357

Malicious code in farming-tools-12 (npm)

defi-tools-39

MAL-2026-5354

Malicious code in defi-tools-39 (npm)

swap-sdk-87

MAL-2026-5359

Malicious code in swap-sdk-87 (npm)

wallet-sdk-9

MAL-2026-5360

Malicious code in wallet-sdk-9 (npm)

ethereum-kit-9

MAL-2026-5356

Malicious code in ethereum-kit-9 (npm)

crypto-utils-7

MAL-2026-5353

Malicious code in crypto-utils-7 (npm)

ethereum-kit-1

MAL-2026-5355

Malicious code in ethereum-kit-1 (npm)

blockchain-helper-0

MAL-2026-5352

Malicious code in blockchain-helper-0 (npm)