Supply Chain Incidents

MAL-2026-4689

Malicious code in test-ajs (npm)

MAL-2026-4739

Malicious code in zkjson (npm)

MAL-2026-4480

Malicious code in aonote (npm)

MAL-2026-4723

Malicious code in weavedb-sdk (npm)

MAL-2026-4715

Malicious code in weavedb-base (npm)

MAL-2026-4721

Malicious code in weavedb-node-client (npm)

MAL-2026-4725

Malicious code in weavedb-sdk-node (npm)

MAL-2026-4454

Malicious code in @taskd/maritime-email-processor (npm)

MAL-2026-4561

Malicious code in fe-utils-core (npm)

MAL-2026-4777

Malicious code in xct-x-ayoub (PyPI)

MAL-2026-4352

Malicious code in xarc-webpack-cli (npm)

MAL-2026-4349

Malicious code in clob.api (npm)

MAL-2026-4348

Malicious code in api-rs-node (npm)

MAL-2026-4347

Malicious code in @devcarron/clob (npm)

MAL-2026-4350

Malicious code in clobprice.api (npm)

MAL-2026-4496

Malicious code in bandkit (npm)

MAL-2026-4747

Malicious code in edison-tools (PyPI)

MAL-2026-4590

Malicious code in json-to-simple-graphql-schema (npm)

MAL-2026-4552

Malicious code in etherproxy-lite (npm)

MAL-2026-4396

Malicious code in @izumiswap/sdk (npm)

MAL-2026-4770

Malicious code in spip-pth-demo (PyPI)

MAL-2026-4615

Malicious code in motion-tool (npm)

MAL-2026-4575

Malicious code in happy-dlscord.js (npm)

MAL-2026-4670

Malicious code in skills-detector (npm)