Supply Chain Incidents

MAL-2026-4365

Malicious code in @atlisp/mcp (npm)

MAL-2026-4526

Malicious code in claw_messenger (npm)

MAL-2026-4549

Malicious code in dot-utils-plus (npm)

MAL-2026-4414

Malicious code in @onerjs/smart-filters (npm)

MAL-2026-4470

Malicious code in @zentrix23/baileys (npm)

MAL-2026-4558

Malicious code in fastgrc-openclaw (npm)

MAL-2026-4642

Malicious code in polygon-toolkit-validate (npm)

MAL-2026-4666

Malicious code in seedcode-facturacion-electronica (npm)

MAL-2026-4510

Malicious code in cerebrum-core (npm)

MAL-2026-4382

Malicious code in @djessicatony/folk-mcp-canary (npm)

MAL-2026-4391

Malicious code in @gad360/apothem (npm)

MAL-2026-4617

Malicious code in n8n-nodes-pentest-rce (npm)

MAL-2026-4626

Malicious code in omnius (npm)

MAL-2026-4401

Malicious code in @kruzer/lib-ui (npm)

MAL-2026-4479

Malicious code in anthropic-shared-logger (npm)

MAL-2026-4209

Malicious code in polymarket-ai-agent (npm)

MAL-2026-4214

Malicious code in polymarket-terminal (npm)

MAL-2026-4219

Malicious code in wallet-security-checker (npm)

MAL-2026-4217

Malicious code in polymarket-trading-cli (npm)

MAL-2026-4220

Malicious code in web3-secrets-detector (npm)

MAL-2026-4202

Malicious code in chain-key-validator (npm)

MAL-2026-4212

Malicious code in polymarket-claude-code (npm)

MAL-2026-4207

Malicious code in eth-wallet-sentinel (npm)

MAL-2026-4204

Malicious code in defi-env-auditor (npm)