Supply Chain Incidents

MAL-2026-5788

Malicious code in @solana-labs/web3js (npm)

MAL-2026-5789

Malicious code in claude-cup (npm)

MAL-2026-5791

Malicious code in mddriver (npm)

MAL-2026-5797

Malicious code in neurodrift (PyPI)

MAL-2026-5794

Malicious code in neural-network-scan (npm)

MAL-2026-5796

Malicious code in llmfree (PyPI)

MAL-2026-5795

Malicious code in gptminifast (PyPI)

MAL-2026-5792

Malicious code in nativescript-swisspost-imagepicker (npm)

MAL-2026-5793

Malicious code in nativescript-swisspost-pcc-creative-editor (npm)

MAL-2026-5790

Malicious code in ldpbootstrap-jquery (npm)

MAL-2026-5777

Malicious code in field-plus (npm)

MAL-2026-5780

Malicious code in ing-feat-itsme-oidc-authentication (npm)

MAL-2026-5781

Malicious code in portal-backend (npm)

MAL-2026-5782

Malicious code in token-prices-cron (npm)

MAL-2026-5784

Malicious code in vaults-monitor-cron (npm)

MAL-2026-5779

Malicious code in hemi-supply-cron (npm)

MAL-2026-5778

Malicious code in hemi-earn-actions (npm)

MAL-2026-5783

Malicious code in vault-strategies (npm)

MAL-2026-5785

Malicious code in ve-hemi-rewards (npm)

MAL-2026-5776

Malicious code in fastgptmini (PyPI)

MAL-2026-5775

Malicious code in ckanext-dms (PyPI)

MAL-2026-5774

Malicious code in um4r719-baileys (npm)

MAL-2026-5773

Malicious code in generatellm (PyPI)

MAL-2026-5772

Malicious code in npx-whoami-demo (npm)