Supply Chain Incidents

MAL-2026-17760

Malicious code in @coopeuch/common (npm)

MAL-2026-17764

Malicious code in @s4yhiitestpoc/r2-https (npm)

MAL-2026-17765

Malicious code in @s4yhiitestpoc/r3-https (npm)

MAL-2026-17777

Malicious code in react-paginate-v5 (npm)

MAL-2026-17772

Malicious code in liferay-workspace-scripts (npm)

MAL-2026-17770

Malicious code in ksp-app (npm)

MAL-2026-17771

Malicious code in ksp-client-registry (npm)

MAL-2026-17767

Malicious code in another-very-long-name (npm)

MAL-2026-17778

Malicious code in some-very-long-package-name (npm)

MAL-2026-17773

Malicious code in nested-lib (npm)

MAL-2026-17776

Malicious code in pay-methods-kmf (npm)

MAL-2026-17768

Malicious code in cloudflare_module (npm)

MAL-2026-17759

Malicious code in @coopeuch/button (npm)

MAL-2026-17769

Malicious code in deposit-limit-fe (npm)

MAL-2026-17775

Malicious code in nitro-cjs-requirer (npm)

MAL-2026-17762

Malicious code in @coopeuch/config (npm)

MAL-2026-17774

Malicious code in nitro-bundled-dep (npm)

MAL-2026-17795

Malicious code in sol-mint-utils (RubyGems)

MAL-2026-17786

Malicious code in eth-gas-oracle (RubyGems)

MAL-2026-17802

Malicious code in xrp-ledger-utils (RubyGems)

MAL-2026-17791

Malicious code in multichain-rpc (RubyGems)

MAL-2026-17796

Malicious code in staking-apr-fetcher (RubyGems)

MAL-2026-17801

Malicious code in web3-signer-kit (RubyGems)

MAL-2026-17792

Malicious code in nft-metadata-resolver (RubyGems)