Supply Chain Incidents

MAL-2026-16357

Malicious code in @asdfaskdjfksadhfkasf/nadaver2 (npm)

@uh-platform/nadaver

MAL-2026-16360

Malicious code in @uh-platform/nadaver (npm)

@uh-platform/domain-widget

MAL-2026-16359

Malicious code in @uh-platform/domain-widget (npm)

@uh-platform/webcard

MAL-2026-16362

Malicious code in @uh-platform/webcard (npm)

@uh-platform/cloud

MAL-2026-16358

Malicious code in @uh-platform/cloud (npm)

@uh-platform/nadaver2

MAL-2026-16361

Malicious code in @uh-platform/nadaver2 (npm)

gemini-computer-use

MAL-2026-16355

Malicious code in gemini-computer-use (npm)

@woodpecker-web-shared/components

MAL-2026-16354

Malicious code in @woodpecker-web-shared/components (npm)

Typosquat

@baanx/blockchain-config

MAL-2026-16352

Malicious code in @baanx/blockchain-config (npm)

@baanx/abis

MAL-2026-16351

Malicious code in @baanx/abis (npm)

@insiderintelligence/componentlibrary

MAL-2026-16353

Malicious code in @insiderintelligence/componentlibrary (npm)

starlette-healthchecks

PyPI

MAL-2026-16356

Malicious code in starlette-healthchecks (PyPI)

Typosquat

bnppf-flag-icons

MAL-2026-16350

Malicious code in bnppf-flag-icons (npm)

hardhat-base

MAL-2026-16348

Malicious code in hardhat-base (npm)

hardhat-devkit

MAL-2026-16349

Malicious code in hardhat-devkit (npm)

rrs

PyPI

MAL-2026-16346

Malicious code in rrs (PyPI)

pf23727

MAL-2026-16338

Malicious code in pf23727 (npm)

pflag14570

MAL-2026-16341

Malicious code in pflag14570 (npm)

pflag29424

MAL-2026-16342

Malicious code in pflag29424 (npm)

pf25133

MAL-2026-16339

Malicious code in pf25133 (npm)

keroeltopgg

MAL-2026-16334

Malicious code in keroeltopgg (npm)

keroeltopkkk

MAL-2026-16336

Malicious code in keroeltopkkk (npm)

Dep Confusion

keroeltopkk

MAL-2026-16335

Malicious code in keroeltopkk (npm)

my-cdn-script

MAL-2026-16337

Malicious code in my-cdn-script (npm)