Supply Chain Incidents

MAL-2026-11480

Malicious code in routerbase-mcp (npm)

MAL-2026-11468

Malicious code in install-native-host (npm)

MAL-2026-11486

Malicious code in smart-npv-mcp (npm)

MAL-2026-11463

Malicious code in goldenflow-js (npm)

MAL-2026-11467

Malicious code in iac-scanner (npm)

MAL-2026-11454

Malicious code in ai-backup-script (npm)

MAL-2026-11434

Malicious code in @404c3s4r/lodash (npm)

MAL-2026-11421

Malicious code in asdk-plugin-ai-platform (PyPI)

MAL-2026-11422

Malicious code in asdk-plugin-alphagen (PyPI)

MAL-2026-11423

Malicious code in asdk-plugin-legacy (PyPI)

MAL-2026-11461

Malicious code in eth-bridge (npm)

MAL-2026-11497

Malicious code in vite-tsconfig-svg (npm)

MAL-2026-11479

Malicious code in rollup-plugin-polyfill-hold (npm)

MAL-2026-11431

Malicious code in @0xlr/dep-confusion-poc (npm)

MAL-2026-11433

Malicious code in @0xlr/test-callback (npm)

MAL-2026-11432

Malicious code in @0xlr/question-types (npm)

MAL-2026-11417

Malicious code in aiprepkit (PyPI)

MAL-2026-11416

Malicious code in ailaunchkit (PyPI)

MAL-2026-11420

Malicious code in walmart-genai-trace (PyPI)

MAL-2026-11418

Malicious code in catalogai (PyPI)

MAL-2026-11419

Malicious code in cognikit (PyPI)

MAL-2026-11414

Malicious code in aiassistcore (PyPI)

MAL-2026-11415

Malicious code in aichannel (PyPI)

MAL-2026-11496

Malicious code in vite-config-svg (npm)