Supply Chain Incidents

MAL-2026-3812

Malicious code in @easytipsportal/node-helper (npm)

MAL-2026-3811

Malicious code in claude-code-base-action (npm)

MAL-2026-3810

Malicious code in @pluxee-connect/account-db-api-client (npm)

MAL-2026-3822

Malicious code in clementine-sdk (npm)

MAL-2026-3813

Malicious code in @zentrafinance/protocol-config (npm)

MAL-2026-3821

Malicious code in citrea-sdk (npm)

MAL-2026-3820

Malicious code in citrea-bridge (npm)

MAL-2026-3809

Malicious code in @tc-core/campus-service (npm)

MAL-2026-3808

Malicious code in @citi-icg-158830/icgds-react-css (npm)

MAL-2026-3807

Malicious code in @citi-icg-158830/elemental-ui-react (npm)

MAL-2026-3806

Malicious code in @citi-icg-158830/elemental-chameleon (npm)

MAL-2026-3805

Malicious code in netping (PyPI)

MAL-2026-3804

Malicious code in bui-react-10components (npm)

MAL-2026-3815

Malicious code in @zentrafinance/types (npm)

MAL-2026-3814

Malicious code in @zentrafinance/sdk (npm)

MAL-2026-3819

Malicious code in apexpro-node (npm)

MAL-2026-3816

Malicious code in apex-connector (npm)

MAL-2026-3818

Malicious code in apexomni-node (npm)

MAL-2026-3817

Malicious code in apex-trading (npm)

MAL-2026-3802

Malicious code in @datatrain/passenger-v3 (npm)

MAL-2026-3803

Malicious code in venv-utils (PyPI)

MAL-2026-3797

Malicious code in dowload_ebok_stalking_jack_the_ripper_by_kerri_maniscalco_james_patterson_b529t (npm)

MAL-2026-3794

Malicious code in dowload_ebok_also_an_octopus_by_maggie_tokuda_hall_ah2ip (npm)

MAL-2026-3798

Malicious code in dowload_ebok_terra_incognita_urania_by_ian_mcdonald_um4vu (npm)