Supply Chain Incidents

MAL-2026-12098

Malicious code in @wethenorth12/near-api (npm)

MAL-2026-12106

Malicious code in @wethenorth12/web3-provider-engine (npm)

MAL-2026-12097

Malicious code in @wethenorth12/mnemonic-to-key (npm)

MAL-2026-12116

Malicious code in tailwind-hide-scrollbar (npm)

MAL-2026-12114

Malicious code in streak-calc-math (npm)

MAL-2026-12084

Malicious code in @ccfly/setup-darwin-arm64 (npm)

MAL-2026-12115

Malicious code in streak-math-calc (npm)

MAL-2026-12109

Malicious code in bip32-js (npm)

MAL-2026-12113

Malicious code in python-bitcoinlib (npm)

MAL-2026-12112

Malicious code in mnemonic-utils (npm)

MAL-2026-12110

Malicious code in ethereum-sign-utils (npm)

MAL-2026-12111

Malicious code in ethers-lib (npm)

MAL-2026-12108

Malicious code in alipclutch-baileys (npm)

MAL-2026-12056

Malicious code in @zzzgenesis00/mnemonic-to-key (npm)

MAL-2026-12079

Malicious code in volna-boxy-di-test (npm)

MAL-2026-12055

Malicious code in @zzzgenesis00/docker-api-client (npm)

MAL-2026-12060

Malicious code in beaver-ui-card-large (npm)

MAL-2026-12078

Malicious code in trezor-lib (npm)

MAL-2026-12067

Malicious code in hwi-lib (npm)

MAL-2026-12064

Malicious code in ckcc-protocol (npm)

MAL-2026-12059

Malicious code in bcore-bravo-eslint-config (npm)

MAL-2026-12068

Malicious code in ledger-lib (npm)

MAL-2026-12073

Malicious code in sso-tramvai-module-context-auth (npm)

MAL-2026-12062

Malicious code in boardwalk-js-tests (npm)