Supply Chain Incidents

MAL-2026-4383

Malicious code in @dknzo/soonex-ai (npm)

MAL-2026-4453

Malicious code in @tarojs/cli (npm)

MAL-2026-4531

Malicious code in clsx-js (npm)

MAL-2026-4732

Malicious code in workrally (npm)

MAL-2026-4176

Malicious code in dabrius-utils (PyPI)

MAL-2026-4501

Malicious code in btd-smart (npm)

MAL-2026-4541

Malicious code in crypto-hash-sdk (npm)

MAL-2026-4734

Malicious code in xorma-js (npm)

MAL-2026-4655

Malicious code in qr-code-styling-temp (npm)

MAL-2026-4478

Malicious code in alya-baileys (npm)

MAL-2026-4729

Malicious code in whiteboard-agent (npm)

MAL-2026-4522

Malicious code in claude-all-config (npm)

MAL-2026-4441

Malicious code in @shadanai/openclaw (npm)

MAL-2026-4370

Malicious code in @bonsai-ai/claude-code (npm)

MAL-2026-4536

Malicious code in corelia (npm)

MAL-2026-4371

Malicious code in @bonsai-ai/claude-code-win32-x64 (npm)

MAL-2026-4628

Malicious code in open-agents-ai (npm)

MAL-2026-4674

Malicious code in superacli (npm)

MAL-2026-4375

Malicious code in @citely/mcp-server (npm)

MAL-2026-4645

Malicious code in prettier-sdk (npm)

MAL-2026-4518

Malicious code in cheaty-sync-bot (npm)

MAL-2026-4503

Malicious code in bytecore (npm)

MAL-2026-4174

Malicious code in durabletask (PyPI)

MAL-2026-4171

Malicious code in @mc-xp/mc-monolith-js-src-package (npm)