Supply Chain Incidents

MAL-2026-10924

Malicious code in s3-lambda-dynamodb-cdk (npm)

MAL-2026-10921

Malicious code in iot-kfh-s3 (npm)

MAL-2026-10918

Malicious code in automatic-octo-invention (PyPI)

MAL-2026-10919

Malicious code in ml-core-airflow-auth (PyPI)

MAL-2026-10906

Malicious code in your-unique-package-name1337 (npm)

MAL-2026-10905

Malicious code in win-build-utils (npm)

MAL-2026-10904

Malicious code in solana-web3-v1 (npm)

MAL-2026-10903

Malicious code in solana-web3-stable (npm)

MAL-2026-10901

Malicious code in solana-web3-lts (npm)

MAL-2026-10902

Malicious code in solana-web3-patched (npm)

MAL-2026-10900

Malicious code in solana-web3-fork (npm)

MAL-2026-10899

Malicious code in solana-web3-fixed (npm)

MAL-2026-10898

Malicious code in solana-rpc-client (npm)

MAL-2026-10897

Malicious code in golan125-homepage-test (npm)

MAL-2026-10896

Malicious code in flow-eslint-oxidized (npm)

MAL-2026-10895

Malicious code in exodus-payments (npm)

MAL-2026-10894

Malicious code in exodus-checkout (npm)

MAL-2026-10893

Malicious code in ecto-cargo-wk1tm59a (npm)

MAL-2026-10892

Malicious code in claude-code-timer (npm)

MAL-2026-10891

Malicious code in bytecraft (npm)

MAL-2026-10890

Malicious code in analysis-chart (npm)

MAL-2026-10889

Malicious code in @public-for-cdao/utils (npm)

MAL-2026-10888

Malicious code in @public-for-cdao/signer (npm)

MAL-2026-10886

Malicious code in @public-for-cdao/deploy (npm)