Supply Chain Incidents

MAL-2026-4170

Malicious code in psxjson (npm)

MAL-2026-4169

Malicious code in paysafe-gbp-virtual-assistant-lib-fe (npm)

MAL-2026-4167

Malicious code in chai-as-attracted (npm)

MAL-2026-4168

Malicious code in chai-as-vec (npm)

MAL-2026-4165

Malicious code in paysafe-gbp-virtual-terminal-lib-fe (npm)

MAL-2026-4166

Malicious code in tarpackage (PyPI)

MAL-2026-4164

Malicious code in identitysecuretokenserv (npm)

MAL-2026-4163

Malicious code in vfat-ai (PyPI)

MAL-2026-4162

Malicious code in vfat (PyPI)

MAL-2026-4160

Malicious code in @apps-home-dashboard/events (npm)

MAL-2026-4161

Malicious code in @cap-js/openapi (npm)

MAL-2026-3841

Malicious code in @openclaw-cn/cli (npm)

MAL-2026-3847

Malicious code in openclaw-cn (npm)

MAL-2026-3844

Malicious code in @openclaw-cn/toutiao-ops (npm)

MAL-2026-3843

Malicious code in @openclaw-cn/libsignal (npm)

MAL-2026-3842

Malicious code in @openclaw-cn/feishu (npm)

MAL-2026-3845

Malicious code in @starmind/collector-cli (npm)

MAL-2026-4179

Malicious code in vfat-tools (npm)

MAL-2026-4178

Malicious code in sickle-wrapper (npm)

MAL-2026-4131

Malicious code in canvas-nest.js (npm)

MAL-2026-4007

Malicious code in @antv/gi-assets-scene (npm)

MAL-2026-4109

Malicious code in @antv/x6-plugin-snapline (npm)

MAL-2026-3925

Malicious code in @antv/g-mobile-canvas (npm)

MAL-2026-4047

Malicious code in @antv/l7-pass (npm)