Supply Chain Incidents

MAL-2026-4473

Malicious code in @zizie071/libsignal-node (npm)

MAL-2026-4288

Malicious code in @jaggle/resizeobserves (npm)

MAL-2026-4289

Malicious code in @stockrepublic/republic-components (npm)

MAL-2026-4290

Malicious code in clipboard-guardian (npm)

MAL-2026-4669

Malicious code in shiroai (npm)

MAL-2026-4547

Malicious code in cxpher-linux-arm32 (npm)

MAL-2026-4285

Malicious code in polydata-analytics (PyPI)

MAL-2026-4286

Malicious code in polymarket-data-fetcher (PyPI)

MAL-2026-4678

Malicious code in sysnode (npm)

MAL-2026-4521

Malicious code in class-weaver (npm)

MAL-2026-4706

Malicious code in vite-plugin-css-blend (npm)

MAL-2026-4776

Malicious code in whatsfly-labfox (PyPI)

MAL-2026-4520

Malicious code in class-blend (npm)

MAL-2026-4644

Malicious code in power-platform-playwright-toolkit (npm)

MAL-2026-4275

Malicious code in async-pipeline-builder (npm)

MAL-2026-4283

Malicious code in token-usage-tracker (npm)

MAL-2026-4276

Malicious code in build-scripts-utils (npm)

MAL-2026-4279

Malicious code in model-switch-router (npm)

MAL-2026-4284

Malicious code in workspace-config-loader (npm)

MAL-2026-4282

Malicious code in prompt-engineering-toolkit (npm)

MAL-2026-4280

Malicious code in node-setup-helpers (npm)

MAL-2026-4281

Malicious code in project-init-tools (npm)

MAL-2026-4278

Malicious code in llm-context-compressor (npm)

MAL-2026-4277

Malicious code in dev-env-bootstrapper (npm)