Supply Chain Incidents

MAL-2026-13929

Malicious code in @dgxeon13/libsignal-node (npm)

MAL-2026-13930

Malicious code in @dreamguyxeon/baileyx (npm)

MAL-2026-13931

Malicious code in @dreamguyxeon/libsignal-node (npm)

MAL-2026-13932

Malicious code in my-auto-follow (npm)

MAL-2026-13712

Malicious code in bigtime (PyPI)

MAL-2026-13714

Malicious code in @sqlite-labs/nodesql (npm)

MAL-2026-13713

Malicious code in @sqlite-labs/createsql (npm)

MAL-2026-13711

Malicious code in plp-contract (PyPI)

MAL-2026-13709

Malicious code in neutrl-contracts (PyPI)

MAL-2026-13710

Malicious code in neutrl-core (PyPI)

MAL-2026-13725

Malicious code in spoint (npm)

MAL-2026-13726

Malicious code in svelte-kit-streak (npm)

MAL-2026-13724

Malicious code in kit-map-streak (npm)

MAL-2026-13723

Malicious code in godot-kit (npm)

MAL-2026-13727

Malicious code in tailwind-elements-ui (npm)

MAL-2026-13718

Malicious code in @sqlite-table/sql-creator (npm)

MAL-2026-13717

Malicious code in @sqlite-table/schema-generator (npm)

MAL-2026-13722

Malicious code in fsbrowse (npm)

MAL-2026-13716

Malicious code in @sqlite-prime/nodesql (npm)

MAL-2026-13715

Malicious code in @sqlite-prime/createsql (npm)

MAL-2026-13719

Malicious code in commonjs-assertion (npm)

MAL-2026-13721

Malicious code in eth-library-utils (npm)

MAL-2026-13720

Malicious code in eth-library-toolkit (npm)

MAL-2026-13707

Malicious code in polymarket-stake-mathss (npm)