Supply Chain Incidents

MAL-2026-11211

Malicious code in @ethers-sdk/wallet (npm)

MAL-2026-11210

Malicious code in @ethers-sdk/ethers (npm)

MAL-2026-11227

Malicious code in @solana-sdk/web3.js (npm)

MAL-2026-11202

Malicious code in ml-shared (PyPI)

MAL-2026-11281

Malicious code in dotenv-core (npm)

MAL-2026-11282

Malicious code in dotex-plugin (npm)

MAL-2026-11267

Malicious code in compose-logger-stand (npm)

MAL-2026-11289

Malicious code in ember-cli-deploy-derploy (npm)

MAL-2026-11386

Malicious code in srgb-linear (npm)

MAL-2026-11249

Malicious code in bn.js-4 (npm)

MAL-2026-11265

Malicious code in cocktail-lib (npm)

MAL-2026-11271

Malicious code in cross-sell (npm)

MAL-2026-11402

Malicious code in time-to-reload (npm)

MAL-2026-11406

Malicious code in unified-help-center-alpha (npm)

MAL-2026-11245

Malicious code in baofdadbybmqeefeeginweoamxlphrjq (npm)

MAL-2026-11350

Malicious code in pulleeelll (npm)

MAL-2026-11275

Malicious code in datdbs (npm)

MAL-2026-11244

Malicious code in bajkvahzv8allnltvr7x4s5hdxkjvyji (npm)

MAL-2026-11238

Malicious code in apihost (npm)

MAL-2026-11253

Malicious code in cancelling (npm)

MAL-2026-11324

Malicious code in js-focus-within (npm)

MAL-2026-11395

Malicious code in termly-namespace (npm)

MAL-2026-11297

Malicious code in ethers-v6 (npm)

MAL-2026-11411

Malicious code in xp-node-logger (npm)