Supply Chain Incidents

MAL-2026-11385

Malicious code in spectral-wraith (npm)

MAL-2026-11361

Malicious code in puppetewebr (npm)

MAL-2026-11301

Malicious code in etwl (npm)

MAL-2026-11348

Malicious code in pretierr (npm)

MAL-2026-11329

Malicious code in maalxios (npm)

MAL-2026-11330

Malicious code in malxios (npm)

MAL-2026-11230

Malicious code in @sourav_chanduka/core-no-ngrok (npm)

MAL-2026-11231

Malicious code in @sourav_chanduka/oidc-client (npm)

MAL-2026-11229

Malicious code in @sourav_chanduka/core (npm)

MAL-2026-11234

Malicious code in @web3utils/common (npm)

MAL-2026-11233

Malicious code in @web3-util/common (npm)

MAL-2026-11228

Malicious code in @solana-utils/common (npm)

MAL-2026-11279

Malicious code in discord-rsc (npm)

MAL-2026-11277

Malicious code in discord-csr (npm)

MAL-2026-11393

Malicious code in tailwindcssss (npm)

MAL-2026-11394

Malicious code in tailwindcsssss (npm)

MAL-2026-11224

Malicious code in @pumpdot-fun/pump-swap-sdk (npm)

MAL-2026-11216

Malicious code in @node-console-log/log (npm)

MAL-2026-11225

Malicious code in @relforce-dev/console-log (npm)

MAL-2026-11223

Malicious code in @pumpdot-fun/pump-sdk (npm)

MAL-2026-11314

Malicious code in fwf (npm)

MAL-2026-11226

Malicious code in @santieich/homebridge-midea-lan (npm)

MAL-2026-11240

Malicious code in aruda (npm)

MAL-2026-11309

Malicious code in famshot (npm)