Supply Chain Incidents

MAL-2026-405

Malicious code in anthropic-sdk (npm)

MAL-2026-429

Malicious code in sign-client (npm)

MAL-2026-416

Malicious code in hw-app-eth (npm)

MAL-2026-432

Malicious code in universal-provider (npm)

MAL-2026-380

Malicious code in @kyriba/platform-frontend (npm)

MAL-2026-391

Malicious code in internallib_v962 (npm)

MAL-2026-379

Malicious code in @joaoxxx/internallib-v325 (npm)

MAL-2026-390

Malicious code in internallib_v325 (npm)

MAL-2026-392

Malicious code in jsonwebauth (npm)

MAL-2026-387

Malicious code in chai-dex (npm)

MAL-2026-386

Malicious code in chai-chain-async (npm)

MAL-2026-404

Malicious code in worldposition (npm)

MAL-2026-402

Malicious code in vworldviewdir (npm)

MAL-2026-396

Malicious code in private-internal-sdk (npm)

MAL-2026-403

Malicious code in worldnormal (npm)

MAL-2026-393

Malicious code in manage-root (npm)

MAL-2026-381

Malicious code in @mikudev/beles (npm)

MAL-2026-384

Malicious code in @mikudev/signal (npm)

MAL-2026-382

Malicious code in @mikudev/ridwan-baileys-mod (npm)

MAL-2026-383

Malicious code in @mikudev/ridwan-signal (npm)

MAL-2026-399

Malicious code in torbaileys (npm)

MAL-2026-398

Malicious code in tor-libsignal (npm)

MAL-2026-389

Malicious code in genki-analytics (npm)

MAL-2026-388

Malicious code in charlie_charlie_kirky (npm)