Supply Chain Incidents

MAL-2026-11437

Malicious code in @finance-ui/snackbar-ifpe (npm)

MAL-2026-11435

Malicious code in @cr-invested-ui-components/chart (npm)

MAL-2026-11424

Malicious code in telerape (PyPI)

MAL-2026-11477

Malicious code in refbase-mcp (npm)

MAL-2026-11455

Malicious code in allurectl (npm)

MAL-2026-11466

Malicious code in hit-mcp (npm)

MAL-2026-11469

Malicious code in iwomm-mcp (npm)

MAL-2026-11472

Malicious code in mcp-server-boilerplate (npm)

MAL-2026-11474

Malicious code in paraglide-js (npm)

MAL-2026-11459

Malicious code in community-published (npm)

MAL-2026-11458

Malicious code in chaos-mcp (npm)

MAL-2026-11464

Malicious code in gtm-mcp-auth (npm)

MAL-2026-11460

Malicious code in create-remotion (npm)

MAL-2026-11482

Malicious code in sap-mcp-facilitator (npm)

MAL-2026-11471

Malicious code in maximumsats-mcp (npm)

MAL-2026-11453

Malicious code in adpanel-core (npm)

MAL-2026-11481

Malicious code in sap-mcp-config (npm)

MAL-2026-11456

Malicious code in attio-discover (npm)

MAL-2026-11457

Malicious code in capacitor-assets (npm)

MAL-2026-11465

Malicious code in hazmat-cfr (npm)

MAL-2026-11470

Malicious code in kip-mcp-http (npm)

MAL-2026-11462

Malicious code in fast-csv-helper (npm)

MAL-2026-11475

Malicious code in pm-claude-skills-mcp (npm)

MAL-2026-11476

Malicious code in polyprompt (npm)