Supply Chain Incidents

MAL-2026-4276

Malicious code in build-scripts-utils (npm)

MAL-2026-4283

Malicious code in token-usage-tracker (npm)

MAL-2026-4280

Malicious code in node-setup-helpers (npm)

MAL-2026-4284

Malicious code in workspace-config-loader (npm)

MAL-2026-4281

Malicious code in project-init-tools (npm)

MAL-2026-4278

Malicious code in llm-context-compressor (npm)

MAL-2026-4279

Malicious code in model-switch-router (npm)

MAL-2026-4282

Malicious code in prompt-engineering-toolkit (npm)

MAL-2026-4277

Malicious code in dev-env-bootstrapper (npm)

MAL-2026-4504

Malicious code in cami-design (npm)

MAL-2026-4660

Malicious code in react-malicious-clone (npm)

MAL-2026-4274

Malicious code in power-apps (npm)

MAL-2026-4398

Malicious code in @jonusnattapong/claudecode (npm)

MAL-2026-4697

Malicious code in twokey (npm)

MAL-2026-4708

Malicious code in wallet-agent-ai (npm)

MAL-2026-4577

Malicious code in harness-skil (npm)

MAL-2026-4272

Malicious code in env-loader-cli (PyPI)

MAL-2026-4271

Malicious code in data-pipeline-check (PyPI)

MAL-2026-4273

Malicious code in git-config-sync (PyPI)

MAL-2026-4681

Malicious code in tailwind-typography-stylecss (npm)

MAL-2026-4599

Malicious code in license-checker-plus (npm)

MAL-2026-4672

Malicious code in solidity-coverage-plus (npm)

MAL-2026-4567

Malicious code in freertc (npm)

MAL-2026-4576

Malicious code in hardhat-gas-analytics (npm)