Supply Chain Incidents

MAL-2026-4604

Malicious code in lynx-keeper-cli (npm)

MAL-2026-4735

Malicious code in xy-ai-chat (npm)

MAL-2026-4653

Malicious code in qaq-core-util-v2 (npm)

MAL-2026-4497

Malicious code in bingocode (npm)

MAL-2026-4412

Malicious code in @onerjs/procedural-textures (npm)

MAL-2026-4385

Malicious code in @druids/ui (npm)

MAL-2026-4251

Malicious code in harmony-enablers-test-2026 (npm)

MAL-2026-4733

Malicious code in wrld-dev (npm)

MAL-2026-4363

Malicious code in @asura21232/fca-unofficial-nextgen (npm)

MAL-2026-4474

Malicious code in acc-document-editing (npm)

MAL-2026-4444

Malicious code in @shwfed/nuxt (npm)

MAL-2026-4236

Malicious code in dependency-audit-tool (npm)

MAL-2026-4246

Malicious code in python-env-auditor (npm)

MAL-2026-4235

Malicious code in credential-verification-cli (npm)

MAL-2026-4245

Malicious code in pypi-build-verifier (npm)

MAL-2026-4250

Malicious code in wallet-backup-verifier (npm)

MAL-2026-4234

Malicious code in compliance-check-runner (npm)

MAL-2026-4232

Malicious code in build-integrity-verify (npm)

MAL-2026-4237

Malicious code in deploy-guard-check (npm)

MAL-2026-4248

Malicious code in solna-web3 (npm)

MAL-2026-4242

Malicious code in foundy-toolkit (npm)

MAL-2026-4240

Malicious code in ethers-multicall-utils (npm)

MAL-2026-4244

Malicious code in hardhat-gas-profiler-plugin (npm)

MAL-2026-4239

Malicious code in etherjs-utils (npm)