Supply Chain Incidents

MAL-2026-13700

Malicious code in chai-as-deployer (npm)

MAL-2026-13699

Malicious code in chai-as-bench (npm)

MAL-2026-13702

Malicious code in chai-as-map (npm)

MAL-2026-13704

Malicious code in chai-tracker (npm)

MAL-2026-13705

Malicious code in iconova-react (npm)

MAL-2026-13688

Malicious code in @kuperka/chainguard-sdk (npm)

MAL-2026-13691

Malicious code in @rblxts/services (npm)

MAL-2026-13696

Malicious code in postcss-initial-provider (npm)

MAL-2026-13692

Malicious code in chai-jsonss (npm)

MAL-2026-13695

Malicious code in hex-encode-utils (npm)

MAL-2026-13689

Malicious code in @noobaihome/amis-simple-area-widget (npm)

MAL-2026-13690

Malicious code in @noobaihome/amis-uni-area-widget (npm)

MAL-2026-13693

Malicious code in cryptostock (npm)

MAL-2026-13694

Malicious code in env-local (npm)

MAL-2026-13698

Malicious code in simple-date-formatter-new-9 (npm)

MAL-2026-13697

Malicious code in simple-date-formatter-new-10 (npm)

MAL-2026-13687

Malicious code in tokocrytodev (npm)

MAL-2026-13686

Malicious code in chaintest (PyPI)

MAL-2026-13685

Malicious code in pytablute (PyPI)

MAL-2026-13684

Malicious code in @ssgw/icon (npm)

MAL-2026-13682

Malicious code in btcflx (PyPI)

MAL-2026-13681

Malicious code in btcflip (PyPI)

MAL-2026-13683

Malicious code in kotoraka (PyPI)

MAL-2026-13667

Malicious code in kotanku (PyPI)