Supply Chain Incidents

MAL-2026-14295

Malicious code in mcp-dev-toolkit (npm)

MAL-2026-14278

Malicious code in layer2-sdk (npm)

MAL-2026-14283

Malicious code in neverthrow-core (npm)

MAL-2026-14279

Malicious code in localize-translate (npm)

MAL-2026-14282

Malicious code in mutex-plus (npm)

MAL-2026-14281

Malicious code in mutex-lite (npm)

MAL-2026-14280

Malicious code in mutex-core (npm)

MAL-2026-14284

Malicious code in nibra1 (npm)

MAL-2026-14276

Malicious code in node_cryptography (npm)

MAL-2026-14275

Malicious code in minequest (npm)

MAL-2026-14277

Malicious code in o0o9 (npm)

MAL-2026-14270

Malicious code in nodealpha (npm)

MAL-2026-14271

Malicious code in nodeberlin (npm)

MAL-2026-14272

Malicious code in price-scripping-js (npm)

MAL-2026-14273

Malicious code in rand-txs-sdk (npm)

MAL-2026-14274

Malicious code in reqcrypt-dev (PyPI)

MAL-2026-14267

Malicious code in karma-proxy (npm)

MAL-2026-14265

Malicious code in easydsbots (npm)

MAL-2026-14268

Malicious code in no-for-of-loops (npm)

MAL-2026-14269

Malicious code in novel-suduko (npm)

MAL-2026-14264

Malicious code in de-morgan (npm)

MAL-2026-14266

Malicious code in electron-sessions (npm)

MAL-2026-14263

Malicious code in arb-kit (npm)

MAL-2026-14261

Malicious code in postcss-initialize-provider (npm)