Supply Chain Incidents

MAL-2026-1966

Malicious code in restaking-apy-module (npm)

json-parse-genie

MAL-2026-1952

Malicious code in json-parse-genie (npm)

interface-builder-kit

MAL-2026-1951

Malicious code in interface-builder-kit (npm)

jsonify-bundler

MAL-2026-1935

Malicious code in jsonify-bundler (npm)

lint-builder

MAL-2026-1936

Malicious code in lint-builder (npm)

big-nunber

MAL-2026-1934

Malicious code in big-nunber (npm)

libavcodec-extra

PyPI

MAL-2026-1933

Malicious code in libavcodec-extra (PyPI)

Dep Confusion

react-native-country-select

MAL-2026-1931

Malicious code in react-native-country-select (npm)

react-native-international-phone-number

MAL-2026-1932

Malicious code in react-native-international-phone-number (npm)

@iflow-mcp/watercrawl-watercrawl-mcp

MAL-2026-1930

Malicious code in @iflow-mcp/watercrawl-watercrawl-mcp (npm)

@aifabrix/miso-client

MAL-2026-1929

Malicious code in @aifabrix/miso-client (npm)

changelog-logger-utils

MAL-2026-1927

Malicious code in changelog-logger-utils (npm)

changelog-logger-wrap

MAL-2026-1928

Malicious code in changelog-logger-wrap (npm)

tokenshower

MAL-2026-1926

Malicious code in tokenshower (npm)

jsonify-parser

MAL-2026-1925

Malicious code in jsonify-parser (npm)

nflx-release

MAL-2026-1580

Malicious code in nflx-release (npm)

wn-idv-persona-client

MAL-2026-1584

Malicious code in wn-idv-persona-client (npm)

whatnot-web

MAL-2026-1583

Malicious code in whatnot-web (npm)

whatnot-events

MAL-2026-1581

Malicious code in whatnot-events (npm)

whatnot-manifests

MAL-2026-1582

Malicious code in whatnot-manifests (npm)

browser-gaming-client

MAL-2026-1578

Malicious code in browser-gaming-client (npm)

nf-cl-ls

MAL-2026-1579

Malicious code in nf-cl-ls (npm)

ropie

PyPI

MAL-2026-1577

Malicious code in ropie (PyPI)

chai-as-constrained

MAL-2026-1576

Malicious code in chai-as-constrained (npm)