Supply Chain Incidents

MAL-2026-6451

Malicious code in simple-node-calc-a (npm)

simple-node-calc-b

MAL-2026-6453

Malicious code in simple-node-calc-b (npm)

simple-node-calc-aa

MAL-2026-6452

Malicious code in simple-node-calc-aa (npm)

simple-node-calc-ccc

MAL-2026-6455

Malicious code in simple-node-calc-ccc (npm)

subsearch

MAL-2026-6457

Malicious code in subsearch (npm)

stitch-design

MAL-2026-6456

Malicious code in stitch-design (npm)

based-32

MAL-2026-6447

Malicious code in based-32 (npm)

howdybase32

MAL-2026-6449

Malicious code in howdybase32 (npm)

Backdoor

nizzybase32

MAL-2026-6450

Malicious code in nizzybase32 (npm)

Backdoor

base58-core

MAL-2026-6445

Malicious code in base58-core (npm)

bs58-86

MAL-2026-6448

Malicious code in bs58-86 (npm)

Typosquat

base62-86x

MAL-2026-6446

Malicious code in base62-86x (npm)

agentsync-tool

MAL-2026-6444

Malicious code in agentsync-tool (npm)

agentsync-pkg

MAL-2026-6443

Malicious code in agentsync-pkg (npm)

Typosquat

logfmt-core

MAL-2026-6437

Malicious code in logfmt-core (npm)

polymarket-stake-math

MAL-2026-6438

Malicious code in polymarket-stake-math (npm)

polymarket-stake-maths

MAL-2026-6439

Malicious code in polymarket-stake-maths (npm)

easy-time-format

MAL-2026-6442

Malicious code in easy-time-format (npm)

tokenization-util

MAL-2026-6440

Malicious code in tokenization-util (npm)

Backdoor

unifydata

MAL-2026-6441

Malicious code in unifydata (npm)

anthropic-claude-latest

MAL-2026-6415

Malicious code in anthropic-claude-latest (npm)

Typosquat

block-slot

MAL-2026-6416

Malicious code in block-slot (npm)

nabisco

MAL-2026-6412

Malicious code in nabisco (npm)

@su-doughnym/metrics-js

MAL-2026-6409

Malicious code in @su-doughnym/metrics-js (npm)