Supply Chain Incidents

MAL-2026-2904

Malicious code in trackora-node (npm)

MAL-2026-2889

Malicious code in chai-as-evm (npm)

MAL-2026-2896

Malicious code in chai-as-stream (npm)

MAL-2026-2903

Malicious code in trackora-chain (npm)

MAL-2026-2893

Malicious code in chai-as-mobj (npm)

MAL-2026-2897

Malicious code in chai-beta (npm)

MAL-2026-2885

Malicious code in chai-as-adapter (npm)

MAL-2026-2898

Malicious code in chai-str (npm)

MAL-2026-2886

Malicious code in chai-as-chain-v2 (npm)

MAL-2026-2887

Malicious code in chai-as-elevated (npm)

MAL-2026-2894

Malicious code in chai-as-nobj (npm)

MAL-2026-2900

Malicious code in dotenv-pack (npm)

MAL-2026-2740

Malicious code in chai-as-type (npm)

MAL-2026-2901

Malicious code in env_express (npm)

MAL-2026-2902

Malicious code in lockedin-chai-chain (npm)

MAL-2026-2888

Malicious code in chai-as-encrypted (npm)

MAL-2026-2697

Malicious code in ccxt-telemetry (PyPI)

MAL-2026-2698

Malicious code in kyleip (PyPI)

MAL-2026-2884

Malicious code in forge-jsx (npm)

MAL-2026-2696

Malicious code in bfx-hf-strategy-perf (npm)

MAL-2026-2695

Malicious code in cpu-optimizers2-33 (PyPI)

MAL-2026-2694

Malicious code in cpu-optimizers (PyPI)

MAL-2026-2693

Malicious code in vs-supplier-portal-web (npm)

MAL-2026-2692

Malicious code in fusion-events (npm)