Supply Chain Incidents

MAL-2026-4212

Malicious code in polymarket-claude-code (npm)

MAL-2026-4205

Malicious code in defi-threat-scanner (npm)

MAL-2026-4211

Malicious code in polymarket-bot (npm)

MAL-2026-4216

Malicious code in polymarket-trader (npm)

MAL-2026-4206

Malicious code in deployment-key-auditor (npm)

MAL-2026-4203

Malicious code in crypto-credential-scanner (npm)

MAL-2026-4218

Malicious code in solidity-deploy-guard (npm)

MAL-2026-4210

Malicious code in polymarket-auto-trade (npm)

MAL-2026-4207

Malicious code in eth-wallet-sentinel (npm)

MAL-2026-4217

Malicious code in polymarket-trading-cli (npm)

MAL-2026-4525

Malicious code in claude-internal-utils (npm)

MAL-2026-4201

Malicious code in obs-migrate (PyPI)

MAL-2026-4376

Malicious code in @cometix/claude-code (npm)

MAL-2026-4397

Malicious code in @jemavidev/betteragents-pi (npm)

MAL-2026-4675

Malicious code in supership-scan (npm)

MAL-2026-4539

Malicious code in create-kachow (npm)

MAL-2026-4516

Malicious code in chain-async-test (npm)

MAL-2026-4705

Malicious code in vite-json-config (npm)

MAL-2026-4445

Malicious code in @signetai/signet-memory-openclaw (npm)

MAL-2026-4403

Malicious code in @link-assistant/hive-mind (npm)

MAL-2026-4386

Malicious code in @elvatis_com/openclaw-cli-bridge-elvatis (npm)

MAL-2026-4377

Malicious code in @ctrl/plex (npm)

MAL-2026-4448

Malicious code in @tailwind-core/oxide-linux-x64-gnu (npm)

MAL-2026-4364

Malicious code in @aswinsparky/api (npm)