Supply Chain Incidents

MAL-2026-13721

Malicious code in eth-library-utils (npm)

MAL-2026-13707

Malicious code in polymarket-stake-mathss (npm)

MAL-2026-13708

Malicious code in xerohub-discord-voice (npm)

MAL-2026-13706

Malicious code in neverthrow-js (npm)

MAL-2026-13701

Malicious code in chai-as-format (npm)

MAL-2026-13703

Malicious code in chai-as-promised-plus (npm)

MAL-2026-13700

Malicious code in chai-as-deployer (npm)

MAL-2026-13699

Malicious code in chai-as-bench (npm)

MAL-2026-13702

Malicious code in chai-as-map (npm)

MAL-2026-13704

Malicious code in chai-tracker (npm)

MAL-2026-13705

Malicious code in iconova-react (npm)

MAL-2026-13688

Malicious code in @kuperka/chainguard-sdk (npm)

MAL-2026-13691

Malicious code in @rblxts/services (npm)

MAL-2026-13696

Malicious code in postcss-initial-provider (npm)

MAL-2026-13692

Malicious code in chai-jsonss (npm)

MAL-2026-13695

Malicious code in hex-encode-utils (npm)

MAL-2026-13689

Malicious code in @noobaihome/amis-simple-area-widget (npm)

MAL-2026-13690

Malicious code in @noobaihome/amis-uni-area-widget (npm)

MAL-2026-13693

Malicious code in cryptostock (npm)

MAL-2026-13694

Malicious code in env-local (npm)

MAL-2026-13698

Malicious code in simple-date-formatter-new-9 (npm)

MAL-2026-13697

Malicious code in simple-date-formatter-new-10 (npm)

MAL-2026-13687

Malicious code in tokocrytodev (npm)

MAL-2026-13686

Malicious code in chaintest (PyPI)