Supply Chain Incidents

MAL-2026-11041

Malicious code in @daylightqc/date-fmt-lite (npm)

MAL-2026-11034

Malicious code in eth-slint (npm)

MAL-2026-11031

Malicious code in govapkg (PyPI)

MAL-2026-11032

Malicious code in chai-as-stringify (npm)

MAL-2026-11039

Malicious code in yuinpm (npm)

MAL-2026-11033

Malicious code in eth-codergen (npm)

MAL-2026-11036

Malicious code in streak-lib-math (npm)

MAL-2026-11038

Malicious code in svelte-streak-metrics (npm)

MAL-2026-11037

Malicious code in svelte-goal-streak (npm)

MAL-2026-11035

Malicious code in streak-bucket-lib (npm)

MAL-2026-11030

Malicious code in vitest-axios (npm)

MAL-2026-11027

Malicious code in fs-extra-core (npm)

MAL-2026-11029

Malicious code in lychee-norm-cache (npm)

MAL-2026-11024

Malicious code in create-kumo-project (npm)

MAL-2026-11025

Malicious code in da-sc-sdk (npm)

MAL-2026-11022

Malicious code in aio-commerce-lib-app (npm)

MAL-2026-11028

Malicious code in helix-deploy (npm)

MAL-2026-11026

Malicious code in ethers-packge (npm)

MAL-2026-11023

Malicious code in bs58-88 (npm)

MAL-2026-11021

Malicious code in @bcryptln/bcryptjs (npm)

MAL-2026-11020

Malicious code in hardhat-gas-tracker (npm)

MAL-2026-11000

Malicious code in application-util (npm)

MAL-2026-11007

Malicious code in web3-terminal (npm)

MAL-2026-11002

Malicious code in habinger (npm)