Supply Chain Incidents

MAL-2026-4350

Malicious code in clobprice.api (npm)

MAL-2026-4349

Malicious code in clob.api (npm)

MAL-2026-4496

Malicious code in bandkit (npm)

MAL-2026-4747

Malicious code in edison-tools (PyPI)

MAL-2026-4590

Malicious code in json-to-simple-graphql-schema (npm)

MAL-2026-4552

Malicious code in etherproxy-lite (npm)

MAL-2026-4396

Malicious code in @izumiswap/sdk (npm)

MAL-2026-4770

Malicious code in spip-pth-demo (PyPI)

MAL-2026-4615

Malicious code in motion-tool (npm)

MAL-2026-4575

Malicious code in happy-dlscord.js (npm)

MAL-2026-4670

Malicious code in skills-detector (npm)

MAL-2026-4351

Malicious code in @databus-service-ui/ui-event (npm)

MAL-2026-4378

Malicious code in @databus-service-ui/scroll-up-content (npm)

MAL-2026-4408

Malicious code in @nolimit-x/win32-x64 (npm)

MAL-2026-4596

Malicious code in koishi-plugin-yuan (npm)

MAL-2026-4438

Malicious code in @service-suppliers/suppliers (npm)

MAL-2026-4344

Malicious code in verify-mycommand (npm)

MAL-2026-4439

Malicious code in @service-user-notifications/set_notifications_not_removable (npm)

MAL-2026-4437

Malicious code in @service-suppliers/set_selected_supplier (npm)

MAL-2026-4436

Malicious code in @service-suppliers/select-supplier-watcher-saga (npm)

MAL-2026-4435

Malicious code in @service-suppliers/fetch_suppliers_action_saga (npm)

MAL-2026-4622

Malicious code in normalize-path-seq (npm)

MAL-2026-4368

Malicious code in @beyondbday/vibe-terminal (npm)

MAL-2026-4570

Malicious code in gehneb (npm)