Supply Chain Incidents

MAL-2026-2427

Malicious code in partner-tracker-api (npm)

MAL-2026-2429

Malicious code in vv-ftend-core (npm)

MAL-2026-2421

Malicious code in @mgcrae/pino-pretty-logger (npm)

MAL-2026-2419

Malicious code in express-session-js (npm)

MAL-2026-2420

Malicious code in @_wnpm/wnpm-cli (npm)

MAL-2026-2328

Malicious code in mcp-server-todo (npm)

MAL-2026-2322

Malicious code in bs58-basic (npm)

MAL-2026-2323

Malicious code in ethersproject-wallet (npm)

MAL-2026-2326

Malicious code in raydium-bs58 (npm)

MAL-2026-2320

Malicious code in base-x-64 (npm)

MAL-2026-2318

Malicious code in @logcore/pino-pretty-logger (npm)

MAL-2026-2325

Malicious code in jonas-prettier-logger (npm)

MAL-2026-2321

Malicious code in base58-engine (npm)

MAL-2026-2319

Malicious code in base-or-engine (npm)

MAL-2026-2324

Malicious code in jellyfi-pino-pretty-logger (npm)

MAL-2026-2314

Malicious code in @c8o/nimbus-core (npm)

MAL-2026-2312

Malicious code in tailwindcss-typeface-inter (npm)

MAL-2026-2307

Malicious code in axios (npm)

MAL-2026-2306

Malicious code in plain-crypto-js (npm)

MAL-2026-2300

Malicious code in eslint-validator (npm)

MAL-2026-2297

Malicious code in earthengine-api (npm)

MAL-2026-2296

Malicious code in bos-decoration-elements (npm)

MAL-2026-2287

Malicious code in f0-state-manager (npm)

MAL-2026-2288

Malicious code in merchservicingnodeserv (npm)