Supply Chain Incidents

MAL-2026-5514

Malicious code in solidity-abi (npm)

MAL-2026-5503

Malicious code in plugin-fastify (npm)

MAL-2026-5502

Malicious code in graphbase-js (npm)

MAL-2026-5496

Malicious code in @validate-ethereum-address/core (npm)

MAL-2026-5498

Malicious code in @validator-sdk/pubkey (npm)

MAL-2026-5495

Malicious code in @solana-launchpad/sdk (npm)

MAL-2026-5494

Malicious code in @meme-sdk/trade (npm)

MAL-2026-5497

Malicious code in @validate-sdk/v2 (npm)

MAL-2026-5499

Malicious code in coinbase-wallet-utils (npm)

MAL-2026-5501

Malicious code in ethers-jss (npm)

MAL-2026-5500

Malicious code in csc154-internall-depend (npm)

MAL-2026-5493

Malicious code in @builder.io/dev-tools (npm)

MAL-2026-5491

Malicious code in xnder-sdk (npm)

MAL-2026-5492

Malicious code in xnder-wrapper-module (npm)

MAL-2026-5490

Malicious code in sb-original (npm)

MAL-2026-5489

Malicious code in bittensor-emission-tracker (PyPI)

MAL-2026-5488

Malicious code in react-pinojs (npm)

MAL-2026-5486

Malicious code in menu-filter-widget-web (npm)

MAL-2026-5478

Malicious code in mcp-server-git (npm)

MAL-2026-5476

Malicious code in mcp-server-fetch (npm)

MAL-2026-5481

Malicious code in mcp-server-postgres (npm)

MAL-2026-5482

Malicious code in mcp-server-redis (npm)

MAL-2026-5484

Malicious code in mcp-server-sequential-thinking (npm)

MAL-2026-5477

Malicious code in mcp-server-figma (npm)