Supply Chain Incidents

MAL-2026-4529

Malicious code in cloudpivot (npm)

MAL-2026-4263

Malicious code in secdriven (npm)

MAL-2026-4413

Malicious code in @onerjs/serializers (npm)

MAL-2026-4410

Malicious code in @onerjs/addons (npm)

MAL-2026-4415

Malicious code in @onerjs/smart-filters-blocks (npm)

MAL-2026-4264

Malicious code in dds-js-idl (npm)

MAL-2026-4548

Malicious code in dds-js-idl-types (npm)

MAL-2026-4683

Malicious code in tax4all-components (npm)

MAL-2026-4369

Malicious code in @blckrose/baileys (npm)

MAL-2026-4600

Malicious code in loading-session (npm)

MAL-2026-4512

Malicious code in chai-as-repaired (npm)

MAL-2026-4260

Malicious code in defi-risk-scanner (PyPI)

MAL-2026-4259

Malicious code in cryptowallet-safety (PyPI)

MAL-2026-4262

Malicious code in solidity-build-guard (PyPI)

MAL-2026-4261

Malicious code in eth-security-auditor (PyPI)

MAL-2026-4258

Malicious code in @engagehub/core (npm)

MAL-2026-4639

Malicious code in pg-expense-example (npm)

MAL-2026-4632

Malicious code in orca-website (npm)

MAL-2026-4636

Malicious code in peertube-plugin-google-analytics-js (npm)

MAL-2026-4680

Malicious code in tailwind-style-typography (npm)

MAL-2026-4556

Malicious code in express-enrouten-async (npm)

MAL-2026-4612

Malicious code in mmt-static (npm)

MAL-2026-4629

Malicious code in openmct-couch-plugin (npm)

MAL-2026-4555

Malicious code in events-router (npm)