Supply Chain Incidents

MAL-2026-4475

Malicious code in aes-decode-runner-pro (npm)

MAL-2026-4420

Malicious code in @polka-ui/loader (npm)

MAL-2026-4404

Malicious code in @loans/vehicles-api (npm)

MAL-2026-4744

Malicious code in cch-agent (PyPI)

MAL-2026-4592

Malicious code in jsontoken-extend (npm)

MAL-2026-4707

Malicious code in vue-compiler-sfc-plugin (npm)

MAL-2026-4728

Malicious code in web-dotenv (npm)

MAL-2026-4519

Malicious code in chromestaff-baileys (npm)

MAL-2026-4730

Malicious code in wml-components (npm)

MAL-2026-4731

Malicious code in wml-core (npm)

MAL-2026-4687

Malicious code in tempo-modules (npm)

MAL-2026-4710

Malicious code in walmart-shared-modules (npm)

MAL-2026-4641

Malicious code in platform-tempo (npm)

MAL-2026-4685

Malicious code in tempo-components (npm)

MAL-2026-4587

Malicious code in intl-ads (npm)

MAL-2026-4688

Malicious code in tempo-shared-modules (npm)

MAL-2026-4586

Malicious code in intl-ad-routing (npm)

MAL-2026-4686

Malicious code in tempo-layout (npm)

MAL-2026-4589

Malicious code in itc-actors-api (npm)

MAL-2026-4595

Malicious code in koishi-plugin-fusheng-count (npm)

MAL-2026-4523

Malicious code in claude-channel-imessage (npm)

MAL-2026-4594

Malicious code in koishi-plugin-fusheng-car (npm)

MAL-2026-4550

Malicious code in emojifancy-print (npm)

MAL-2026-4485

Malicious code in atel-mcp-openclaw (npm)