Supply Chain Incidents

MAL-2026-10476

Malicious code in @gleamkit/engine.io (npm)

MAL-2026-10471

Malicious code in loading-sessions (npm)

MAL-2026-10470

Malicious code in @uw010010/vite-tree (npm)

MAL-2026-10469

Malicious code in @sheltr_/agent (npm)

MAL-2026-10455

Malicious code in @origindev/ethaccount (npm)

MAL-2026-10456

Malicious code in @spzhongwin/skill-logger-plugin (npm)

MAL-2026-10468

Malicious code in nodemon-sync (npm)

MAL-2026-10462

Malicious code in hehehee (npm)

MAL-2026-10457

Malicious code in cktool-core (npm)

MAL-2026-10466

Malicious code in polymarket-math-stake-kelly (npm)

MAL-2026-10461

Malicious code in gptlite (npm)

MAL-2026-10467

Malicious code in polymarket-stake-kelly-math (npm)

MAL-2026-10458

Malicious code in compliancepolicyserv (npm)

MAL-2026-10459

Malicious code in connectedmerchantsserv (npm)

MAL-2026-10460

Malicious code in datavaultx (npm)

MAL-2026-10463

Malicious code in node-path-addon (npm)

MAL-2026-10464

Malicious code in node-procmetrics-data (npm)

MAL-2026-10465

Malicious code in node-sysmon-native (npm)

MAL-2026-10454

Malicious code in nodemon-async (npm)

MAL-2026-10453

Malicious code in router-processor (npm)

MAL-2026-10450

Malicious code in font-hub (npm)

MAL-2026-10448

Malicious code in @sqlite-group/schema-generator (npm)

MAL-2026-10451

Malicious code in gifuct (npm)

MAL-2026-10449

Malicious code in auth-gen-next (npm)