Supply Chain Incidents

MAL-2026-4725

Malicious code in weavedb-sdk-node (npm)

MAL-2026-4454

Malicious code in @taskd/maritime-email-processor (npm)

MAL-2026-4561

Malicious code in fe-utils-core (npm)

MAL-2026-4352

Malicious code in xarc-webpack-cli (npm)

MAL-2026-4348

Malicious code in api-rs-node (npm)

MAL-2026-4349

Malicious code in clob.api (npm)

MAL-2026-4347

Malicious code in @devcarron/clob (npm)

MAL-2026-4350

Malicious code in clobprice.api (npm)

MAL-2026-4496

Malicious code in bandkit (npm)

MAL-2026-4590

Malicious code in json-to-simple-graphql-schema (npm)

MAL-2026-4552

Malicious code in etherproxy-lite (npm)

MAL-2026-4396

Malicious code in @izumiswap/sdk (npm)

MAL-2026-4615

Malicious code in motion-tool (npm)

MAL-2026-4575

Malicious code in happy-dlscord.js (npm)

MAL-2026-4670

Malicious code in skills-detector (npm)

MAL-2026-4351

Malicious code in @databus-service-ui/ui-event (npm)

MAL-2026-4378

Malicious code in @databus-service-ui/scroll-up-content (npm)

MAL-2026-4408

Malicious code in @nolimit-x/win32-x64 (npm)

MAL-2026-4596

Malicious code in koishi-plugin-yuan (npm)

MAL-2026-4438

Malicious code in @service-suppliers/suppliers (npm)

MAL-2026-4344

Malicious code in verify-mycommand (npm)

MAL-2026-4439

Malicious code in @service-user-notifications/set_notifications_not_removable (npm)

MAL-2026-4437

Malicious code in @service-suppliers/set_selected_supplier (npm)

MAL-2026-4436

Malicious code in @service-suppliers/select-supplier-watcher-saga (npm)