Supply Chain Incidents

MAL-2026-13397

Malicious code in @vanexalabs-ai/vanexa-agent (npm)

MAL-2026-13405

Malicious code in vitest-preview-pro-all (npm)

MAL-2026-13399

Malicious code in agenthub-multiagent-mcp (npm)

MAL-2026-13403

Malicious code in streak-cache-map (npm)

MAL-2026-13401

Malicious code in helmet-pro (npm)

MAL-2026-13402

Malicious code in jagproject (npm)

MAL-2026-13393

Malicious code in wallet-monitor-snap (npm)

MAL-2026-13392

Malicious code in golaaa (npm)

MAL-2026-13386

Malicious code in decapod-common (PyPI)

MAL-2026-13391

Malicious code in @zahlen/checkout (npm)

MAL-2026-13389

Malicious code in @voxepay/checkout (npm)

MAL-2026-13388

Malicious code in @simplipayng/checkout (npm)

MAL-2026-13387

Malicious code in @afasinatickets/common (npm)

MAL-2026-13390

Malicious code in @xsat10/baileys-xsat (npm)

MAL-2026-13435

Malicious code in @united-airlines-org/atmos-design-system (npm)

MAL-2026-13383

Malicious code in svelte-mapped-metrics (npm)

MAL-2026-13384

Malicious code in svelte-mapping-core (npm)

MAL-2026-13380

Malicious code in uncrypt (PyPI)

MAL-2026-13374

Malicious code in @chnayser/server (npm)

MAL-2026-13376

Malicious code in claude-remote-agent (npm)

MAL-2026-13377

Malicious code in ezdiscordbots (npm)

MAL-2026-13378

Malicious code in npm-dc-dev (npm)

MAL-2026-13375

Malicious code in app-api-sdk (npm)

MAL-2026-13379

Malicious code in statist-browser-typed-client-sme.rko.tariffs.web (npm)