Supply Chain Incidents

MAL-2026-4238

Malicious code in env-security-scanner (npm)

MAL-2026-4609

Malicious code in mev-shield (npm)

MAL-2026-4585

Malicious code in internallib_v493 (npm)

MAL-2026-4487

Malicious code in audit-logsss (npm)

MAL-2026-4388

Malicious code in @exocore/exocode (npm)

MAL-2026-4231

Malicious code in pylogfmt (PyPI)

MAL-2026-4477

Malicious code in allbridge-example-react (npm)

MAL-2026-4582

Malicious code in ignite-market-contracts (npm)

MAL-2026-4583

Malicious code in ignite-market-contractstest (npm)

MAL-2026-4755

Malicious code in mathepy (PyPI)

MAL-2026-4540

Malicious code in crypt0co-walet-poc (npm)

MAL-2026-4749

Malicious code in fakehuop (PyPI)

MAL-2026-4524

Malicious code in claude-content-writer (npm)

MAL-2026-4230

Malicious code in cryptoco-auth (npm)

MAL-2026-4429

Malicious code in @rui.branco/sentry-mcp (npm)

MAL-2026-4664

Malicious code in search-connector-template (npm)

MAL-2026-4535

Malicious code in configcat-trello-powerup (npm)

MAL-2026-4424

Malicious code in @remitee-money-transfer/rmt-base (npm)

MAL-2026-4530

Malicious code in cloudsmith-vsc (npm)

MAL-2026-4416

Malicious code in @ornexus/neocortex (npm)

MAL-2026-4565

Malicious code in fnd-stores (npm)

MAL-2026-4650

Malicious code in pubnub-moderation-tool (npm)

MAL-2026-4614

Malicious code in moneykit-cardano-demo (npm)

MAL-2026-4514

Malicious code in chai-as-vite (npm)