Supply Chain Incidents

MAL-2026-5370

Malicious code in @doaction/eventemitter (npm)

MAL-2026-5368

Malicious code in transacts (npm)

MAL-2026-5346

Malicious code in cookie-parser-legacy (npm)

MAL-2026-5347

Malicious code in moustick (npm)

MAL-2026-5345

Malicious code in dstill (PyPI)

MAL-2026-5348

Malicious code in os-ulid-void (npm)

MAL-2026-5344

Malicious code in @bancolonbia/menu-filter-widget-web (npm)

MAL-2026-5357

Malicious code in farming-tools-12 (npm)

MAL-2026-5354

Malicious code in defi-tools-39 (npm)

MAL-2026-5359

Malicious code in swap-sdk-87 (npm)

MAL-2026-5360

Malicious code in wallet-sdk-9 (npm)

MAL-2026-5356

Malicious code in ethereum-kit-9 (npm)

MAL-2026-5353

Malicious code in crypto-utils-7 (npm)

MAL-2026-5355

Malicious code in ethereum-kit-1 (npm)

MAL-2026-5352

Malicious code in blockchain-helper-0 (npm)

MAL-2026-5351

Malicious code in @demica/shared (npm)

MAL-2026-5350

Malicious code in @demica/resources (npm)

MAL-2026-5349

Malicious code in @demica/core (npm)

MAL-2026-5358

Malicious code in solana-core-4 (npm)

MAL-2026-5361

Malicious code in web3-tools-9 (npm)

MAL-2026-5341

Malicious code in void-ulid (npm)

MAL-2026-5340

Malicious code in xfoofoox (PyPI)

MAL-2026-5338

Malicious code in solana-web3-py (PyPI)

MAL-2026-5336

Malicious code in solana-cli-py (PyPI)