Supply Chain Incidents

MAL-2026-4027

Malicious code in @antv/hierarchy (npm)

MAL-2026-4120

Malicious code in @antv/xflow-diff (npm)

MAL-2026-4026

Malicious code in @antv/graphlib (npm)

MAL-2026-4138

Malicious code in jest-electron (npm)

MAL-2026-4134

Malicious code in fixed-round (npm)

MAL-2026-4056

Malicious code in @antv/larkmap (npm)

MAL-2026-4091

Malicious code in @antv/translator (npm)

MAL-2026-3946

Malicious code in @antv/g-plugin-html-renderer (npm)

MAL-2026-4154

Malicious code in slice.js (npm)

MAL-2026-4136

Malicious code in jest-canvas-mock (npm)

MAL-2026-3835

Malicious code in solana-web3-alt (PyPI)

MAL-2026-3834

Malicious code in foundry-utils (PyPI)

MAL-2026-3830

Malicious code in @zentrafinance/contracts (npm)

MAL-2026-3831

Malicious code in citrea-utils (npm)

MAL-2026-3832

Malicious code in zentra-finance (npm)

MAL-2026-3833

Malicious code in zentra-sdk (npm)

MAL-2026-3836

Malicious code in ctf-flare (npm)

MAL-2026-3829

Malicious code in pyenvprep (PyPI)

MAL-2026-3825

Malicious code in safe-env-reader (npm)

MAL-2026-3824

Malicious code in parse-regex-string (npm)

MAL-2026-3828

Malicious code in validate-api-key (npm)

MAL-2026-3823

Malicious code in parse-escape-regex-string (npm)

MAL-2026-3827

Malicious code in string-manipulation-typescript (npm)

MAL-2026-3826

Malicious code in secure-env-loader (npm)