Supply Chain Incidents

MAL-2026-5863

Malicious code in @ts-internal/shared-lib (npm)

MAL-2026-5862

Malicious code in vitest-pro (npm)

MAL-2026-5860

Malicious code in solana-js-client (npm)

MAL-2026-5861

Malicious code in solana-mev-bot (npm)

MAL-2026-5856

Malicious code in carousel-controller-mixin (npm)

MAL-2026-5859

Malicious code in setka-editor (npm)

MAL-2026-5857

Malicious code in event-metrics-q3x7 (npm)

MAL-2026-5858

Malicious code in metrics-pipeline-d8k2 (npm)

MAL-2026-5854

Malicious code in tailwind-typography-style (npm)

MAL-2026-5853

Malicious code in sp-api-dev-assistant-mcp-server (npm)

MAL-2026-5851

Malicious code in epm-service-module-v2 (npm)

MAL-2026-5855

Malicious code in vemos-sdk (npm)

MAL-2026-5852

Malicious code in richtext-editor-ui (npm)

MAL-2026-5847

Malicious code in reading-cookies (npm)

MAL-2026-5846

Malicious code in prettier_v2 (npm)

MAL-2026-5842

Malicious code in browserslist-db-sync (npm)

MAL-2026-5845

Malicious code in prettier_v1 (npm)

MAL-2026-5848

Malicious code in slow-surf (npm)

MAL-2026-5844

Malicious code in numdifftools (npm)

MAL-2026-5849

Malicious code in vite-configu-react (npm)

MAL-2026-5843

Malicious code in chai-smart-assert (npm)

MAL-2026-5850

Malicious code in vite-enhancer-config (npm)

MAL-2026-5840

Malicious code in testpackagemanyhttpsgo (PyPI)

MAL-2026-5841

Malicious code in twrap-toolkit (PyPI)