Supply Chain Incidents

MAL-2026-10495

Malicious code in @quukk/opencode-clawmessenger (npm)

MAL-2026-10494

Malicious code in @quickcall/krew (npm)

MAL-2026-10499

Malicious code in eth-lib-utils (npm)

MAL-2026-10493

Malicious code in insomnia-plugin-poc-m4gester-run (npm)

MAL-2026-10491

Malicious code in assertcoreutils (npm)

MAL-2026-10492

Malicious code in font-huge (npm)

MAL-2026-10490

Malicious code in @sqlite-panel/createsql (npm)

MAL-2026-10488

Malicious code in permcarmserver (npm)

MAL-2026-10489

Malicious code in permcserver (npm)

MAL-2026-10486

Malicious code in @omniwatch-wick/cli (npm)

MAL-2026-10487

Malicious code in @outsmartly/metaobjects (npm)

MAL-2026-10485

Malicious code in polymarket-stake-kelly-math-check (npm)

MAL-2026-10482

Malicious code in react-icons-svgo (npm)

MAL-2026-10484

Malicious code in browser-use-headless (PyPI)

MAL-2026-10479

Malicious code in node-fsmetrics-data (npm)

MAL-2026-10483

Malicious code in route-processor (npm)

MAL-2026-10480

Malicious code in node-fsmetrics-native (npm)

MAL-2026-10481

Malicious code in polymarket-mcp-v2 (npm)

MAL-2026-10478

Malicious code in @sectest429/hello-npm-world (npm)

MAL-2026-10472

Malicious code in @torbeck/priority-queue (npm)

MAL-2026-10473

Malicious code in claude-team-tracker (npm)

MAL-2026-10475

Malicious code in @dervix/socket.io (npm)

MAL-2026-10474

Malicious code in @dervix/engine.io (npm)

MAL-2026-10476

Malicious code in @gleamkit/engine.io (npm)