Supply Chain Incidents

MAL-2026-12359

Malicious code in crypto-javas (npm)

MAL-2026-12426

Malicious code in relativity-foundation-core (npm)

MAL-2026-12386

Malicious code in fundraiserservpp (npm)

MAL-2026-12471

Malicious code in streak-view-core (npm)

MAL-2026-12431

Malicious code in rpc-endpoint-rotator (npm)

MAL-2026-12348

Malicious code in chai-as-rendered (npm)

MAL-2026-12371

Malicious code in eth-codegen (npm)

MAL-2026-12497

Malicious code in vscode-designer-14 (npm)

MAL-2026-12498

Malicious code in wagmi-react (npm)

MAL-2026-12357

Malicious code in cors-security (npm)

MAL-2026-12436

Malicious code in shift-sdk-v5 (npm)

MAL-2026-12424

Malicious code in react-native-ui-message (npm)

MAL-2026-12473

Malicious code in table-ui-new (npm)

MAL-2026-12355

Malicious code in com.db.dbk.ui-forms (npm)

MAL-2026-12326

Malicious code in @offa/offa-uwk (npm)

MAL-2026-12388

Malicious code in gekko-trading-bot (npm)

MAL-2026-12376

Malicious code in express-middle (npm)

MAL-2026-12344

Malicious code in caldora (npm)

MAL-2026-12349

Malicious code in chai-assertions-plus (npm)

MAL-2026-12405

Malicious code in opencode-engos-ai (npm)

MAL-2026-12499

Malicious code in wallet-analytics (npm)

MAL-2026-12494

Malicious code in ventrix-kit (npm)

MAL-2026-12313

Malicious code in @ccfly/setup-darwin-x64 (npm)

MAL-2026-12402

Malicious code in new-native-tools-linux-x64-gnu (npm)