Supply Chain Incidents

MAL-2026-6765

Malicious code in @marketfront/bannerpopup (npm)

date-fns-lite

MAL-2026-6722

Malicious code in date-fns-lite (npm)

electron-orbit

MAL-2026-6723

Malicious code in electron-orbit (npm)

starlette-healthcheck

PyPI

MAL-2026-6724

Malicious code in starlette-healthcheck (PyPI)

svgcraft-core

MAL-2026-6715

Malicious code in svgcraft-core (npm)

Backdoor

test-pkg-yarn

MAL-2026-6718

Malicious code in test-pkg-yarn (npm)

test-pkg-pnpm

MAL-2026-6716

Malicious code in test-pkg-pnpm (npm)

test-pkg-x0

MAL-2026-6717

Malicious code in test-pkg-x0 (npm)

polymarket-toolkit

MAL-2026-6713

Malicious code in polymarket-toolkit (npm)

polymarket-trading-developer-tool

MAL-2026-6714

Malicious code in polymarket-trading-developer-tool (npm)

polymarket-risk-manager

MAL-2026-6712

Malicious code in polymarket-risk-manager (npm)

ts-clob-math-v2

MAL-2026-6719

Malicious code in ts-clob-math-v2 (npm)

ts-elinter

MAL-2026-6720

Malicious code in ts-elinter (npm)

ts-eslint-helper

MAL-2026-6721

Malicious code in ts-eslint-helper (npm)

twrap-tool

PyPI

MAL-2026-6711

Malicious code in twrap-tool (PyPI)

Typosquat

vega-lite-next

MAL-2026-6709

Malicious code in vega-lite-next (npm)

Typosquat

vitest-agent

MAL-2026-6710

Malicious code in vitest-agent (npm)

hardhat-plugin-solidity

MAL-2026-6706

Malicious code in hardhat-plugin-solidity (npm)

hardhat-compile-ethers

MAL-2026-6705

Malicious code in hardhat-compile-ethers (npm)

Typosquat

zyncmap

MAL-2026-6708

Malicious code in zyncmap (npm)

Backdoor

svgson-lite

MAL-2026-6707

Malicious code in svgson-lite (npm)

Backdoor

base65-85x

MAL-2026-6704

Malicious code in base65-85x (npm)

@andes-tools/colors

MAL-2026-6703

Malicious code in @andes-tools/colors (npm)

npm-show-date-proof-strings

MAL-2026-6791

Malicious code in npm-show-date-proof-strings (npm)