Supply Chain Incidents

MAL-2026-13215

Malicious code in @zzzcrypto/xrp-lib (npm)

MAL-2026-13213

Malicious code in @zzzcrypto/playwrite (npm)

MAL-2026-13211

Malicious code in @zzzcrypto/bitcoin-lib (npm)

MAL-2026-13212

Malicious code in @zzzcrypto/etherjs (npm)

MAL-2026-13267

Malicious code in devplatform-test-pvm-is-even (npm)

MAL-2026-13218

Malicious code in aws-sdk-v4 (npm)

MAL-2026-13263

Malicious code in devplatform-spa-use-track (npm)

MAL-2026-13262

Malicious code in devplatform-spa-ui (npm)

MAL-2026-13260

Malicious code in devplatform-spa-plugin-s3 (npm)

MAL-2026-13266

Malicious code in devplatform-table (npm)

MAL-2026-13261

Malicious code in devplatform-spa-plugin-s3-router (npm)

MAL-2026-13265

Malicious code in devplatform-supafetch (npm)

MAL-2026-13264

Malicious code in devplatform-sre-devplatform-sre-core (npm)

MAL-2026-13273

Malicious code in devplatform-vite-plugin-gle (npm)

MAL-2026-13272

Malicious code in devplatform-vite-plugin-external (npm)

MAL-2026-13271

Malicious code in devplatform-utils (npm)

MAL-2026-13268

Malicious code in devplatform-test-pvm-is-odd (npm)

MAL-2026-13269

Malicious code in devplatform-ui-kit (npm)

MAL-2026-13283

Malicious code in dolyame-boxy-atom-bnpl-button (npm)

MAL-2026-13270

Malicious code in devplatform-ui-notification (npm)

MAL-2026-13274

Malicious code in devplatform-vite-plugin-preserve-css-modules (npm)

MAL-2026-13282

Malicious code in dolyame-boxy-atom-bnpl-badge (npm)

MAL-2026-13281

Malicious code in docsmate-docsmate-core (npm)

MAL-2026-13276

Malicious code in dippy-invertor (npm)