Supply Chain Incidents

MAL-2026-1940

Malicious code in @validates-sdk/v3 (npm)

MAL-2026-1938

Malicious code in @metaplex-foundations/umi-public-keys (npm)

MAL-2026-1963

Malicious code in polymarket-onchain (npm)

MAL-2026-1937

Malicious code in @dotprompt/promptly-darwin-arm64 (npm)

MAL-2026-1943

Malicious code in clob-utils-sdks (npm)

MAL-2026-1941

Malicious code in client-hash-sdk (npm)

MAL-2026-1965

Malicious code in pretty-ts-logger (npm)

MAL-2026-1972

Malicious code in wildhunter (npm)

MAL-2026-1970

Malicious code in supportgameapp (npm)

MAL-2026-1966

Malicious code in restaking-apy-module (npm)

MAL-2026-1952

Malicious code in json-parse-genie (npm)

MAL-2026-1951

Malicious code in interface-builder-kit (npm)

MAL-2026-1935

Malicious code in jsonify-bundler (npm)

MAL-2026-1934

Malicious code in big-nunber (npm)

MAL-2026-1936

Malicious code in lint-builder (npm)

MAL-2026-1933

Malicious code in libavcodec-extra (PyPI)

MAL-2026-1931

Malicious code in react-native-country-select (npm)

MAL-2026-1932

Malicious code in react-native-international-phone-number (npm)

MAL-2026-1930

Malicious code in @iflow-mcp/watercrawl-watercrawl-mcp (npm)

MAL-2026-1929

Malicious code in @aifabrix/miso-client (npm)

MAL-2026-1927

Malicious code in changelog-logger-utils (npm)

MAL-2026-1928

Malicious code in changelog-logger-wrap (npm)

MAL-2026-1926

Malicious code in tokenshower (npm)

MAL-2026-1925

Malicious code in jsonify-parser (npm)