Supply Chain Incidents

MAL-2026-13370

Malicious code in llm-interceptor (npm)

MAL-2026-13369

Malicious code in kepler (npm)

MAL-2026-13371

Malicious code in multi-acct (npm)

MAL-2026-13368

Malicious code in express-dever (npm)

MAL-2026-13363

Malicious code in @cliphijack/santaclaude (npm)

MAL-2026-13364

Malicious code in @ikbal_fadilah_vanexa01/vanexa-agent (npm)

MAL-2026-13365

Malicious code in @stageflight-testbed/a (npm)

MAL-2026-13367

Malicious code in clawtrl-wallet (npm)

MAL-2026-13366

Malicious code in @workoscalif/sudoku (npm)

MAL-2026-13373

Malicious code in solana-sniper-bot (PyPI)

MAL-2026-13372

Malicious code in eth-account-wallet (PyPI)

MAL-2026-13361

Malicious code in defi-sdk-py (PyPI)

MAL-2026-13362

Malicious code in mnemonic-py (PyPI)

MAL-2026-13360

Malicious code in uzair-rajput-new (npm)

MAL-2026-13359

Malicious code in test-dev-config (npm)

MAL-2026-13358

Malicious code in app-kst-engine (npm)

MAL-2026-13357

Malicious code in app-hsu-layer (npm)

MAL-2026-13356

Malicious code in chai-foundry (npm)

MAL-2026-13355

Malicious code in @astralcore/sl-aura (npm)

MAL-2026-13210

Malicious code in @ohos-ports/codex (npm)

MAL-2026-13353

Malicious code in stellarfixer (npm)

MAL-2026-13344

Malicious code in ezfnfix (npm)

MAL-2026-13342

Malicious code in encrypt-string-safe (npm)

MAL-2026-13209

Malicious code in @guangnao/claude-cli (npm)