Supply Chain Incidents

MAL-2026-4197

Malicious code in pretty-logger-utils (npm)

MAL-2026-4500

Malicious code in bricks-builder-mcp (npm)

MAL-2026-4601

Malicious code in local-mcp (npm)

MAL-2026-4200

Malicious code in art-template (npm)

MAL-2026-4698

Malicious code in use-context-selector-tony (npm)

MAL-2026-4640

Malicious code in pino-formatter (npm)

MAL-2026-4581

Malicious code in idlidosa (npm)

MAL-2026-4684

Malicious code in tdpilot (npm)

MAL-2026-4466

Malicious code in @weirdorg/config (npm)

MAL-2026-4481

Malicious code in arc-diag-util (npm)

MAL-2026-4471

Malicious code in @zesyn/zeditor (npm)

MAL-2026-4467

Malicious code in @weirdorg/dotenv (npm)

MAL-2026-4667

Malicious code in seekcode (npm)

MAL-2026-4422

Malicious code in @qwedqwed/axios (npm)

MAL-2026-4199

Malicious code in ts-logger-pack (npm)

MAL-2026-4198

Malicious code in terminal-logger-utils (npm)

MAL-2026-4432

Malicious code in @sec-loans-ui/utils (npm)

MAL-2026-4425

Malicious code in @riskine-frontend/design-elements (npm)

MAL-2026-4183

Malicious code in openclaw-agent (PyPI)

MAL-2026-4661

Malicious code in react-tracked-tony (npm)

MAL-2026-4654

Malicious code in qazaq-cli (npm)

MAL-2026-4648

Malicious code in promptbook-cli (npm)

MAL-2026-4649

Malicious code in promptbook-mcp (npm)

MAL-2026-4560

Malicious code in fca-official-uzair-rajput (npm)