Supply Chain Incidents

MAL-2026-5351

Malicious code in @demica/shared (npm)

MAL-2026-5350

Malicious code in @demica/resources (npm)

MAL-2026-5349

Malicious code in @demica/core (npm)

MAL-2026-5358

Malicious code in solana-core-4 (npm)

MAL-2026-5361

Malicious code in web3-tools-9 (npm)

MAL-2026-5341

Malicious code in void-ulid (npm)

MAL-2026-5328

Malicious code in @zimmo/last_search (npm)

MAL-2026-5327

Malicious code in @listings/energy-labels (npm)

MAL-2026-5365

Malicious code in quickwinston (npm)

MAL-2026-5307

Malicious code in classwind-utils (npm)

MAL-2026-5310

Malicious code in regexp-ts (npm)

MAL-2026-5309

Malicious code in nodemon-lint (npm)

MAL-2026-5306

Malicious code in chai-mocks (npm)

MAL-2026-5308

Malicious code in nodemon-copack (npm)

MAL-2026-5366

Malicious code in zer0one-dnslog (npm)

MAL-2026-5342

Malicious code in kecak256 (npm)

MAL-2026-5343

Malicious code in progerss-cli (npm)

MAL-2026-5297

Malicious code in consumerweb-authflow (npm)

MAL-2026-5291

Malicious code in sequoia-engineering (npm)

MAL-2026-5363

Malicious code in @solana-labs/web3-js (npm)

MAL-2026-5362

Malicious code in @solana-labs/etherjs (npm)

MAL-2026-5289

Malicious code in unifi-portal (npm)

MAL-2026-5288

Malicious code in uisp-connector (npm)

MAL-2026-5286

Malicious code in encrypted-archive (npm)