Supply Chain Incidents

MAL-2026-4481

Malicious code in arc-diag-util (npm)

MAL-2026-4471

Malicious code in @zesyn/zeditor (npm)

MAL-2026-4467

Malicious code in @weirdorg/dotenv (npm)

MAL-2026-4667

Malicious code in seekcode (npm)

MAL-2026-4422

Malicious code in @qwedqwed/axios (npm)

MAL-2026-4199

Malicious code in ts-logger-pack (npm)

MAL-2026-4198

Malicious code in terminal-logger-utils (npm)

MAL-2026-4432

Malicious code in @sec-loans-ui/utils (npm)

MAL-2026-4425

Malicious code in @riskine-frontend/design-elements (npm)

MAL-2026-4183

Malicious code in openclaw-agent (PyPI)

MAL-2026-4661

Malicious code in react-tracked-tony (npm)

MAL-2026-4654

Malicious code in qazaq-cli (npm)

MAL-2026-4648

Malicious code in promptbook-cli (npm)

MAL-2026-4649

Malicious code in promptbook-mcp (npm)

MAL-2026-4560

Malicious code in fca-official-uzair-rajput (npm)

MAL-2026-4665

Malicious code in security-env-loader (npm)

MAL-2026-4459

Malicious code in @touchvue/chat (npm)

MAL-2026-4568

Malicious code in fulcrum-sessions (npm)

MAL-2026-4493

Malicious code in axiosqqq (npm)

MAL-2026-4502

Malicious code in bucket-protocol-sdk-v2 (npm)

MAL-2026-4418

Malicious code in @pluxee-connect/api-client (npm)

MAL-2026-4608

Malicious code in mcp-server-iehub-proxy (npm)

MAL-2026-4449

Malicious code in @tailwind-core/oxide-win32-x64-msvc (npm)

MAL-2026-4562

Malicious code in figma-d2c-utils (npm)