Supply Chain Incidents

MAL-2026-12473

Malicious code in table-ui-new (npm)

MAL-2026-12355

Malicious code in com.db.dbk.ui-forms (npm)

MAL-2026-12326

Malicious code in @offa/offa-uwk (npm)

MAL-2026-12388

Malicious code in gekko-trading-bot (npm)

MAL-2026-12376

Malicious code in express-middle (npm)

MAL-2026-12344

Malicious code in caldora (npm)

MAL-2026-12349

Malicious code in chai-assertions-plus (npm)

MAL-2026-12503

Malicious code in numpyp (PyPI)

MAL-2026-12405

Malicious code in opencode-engos-ai (npm)

MAL-2026-12499

Malicious code in wallet-analytics (npm)

MAL-2026-12494

Malicious code in ventrix-kit (npm)

MAL-2026-12313

Malicious code in @ccfly/setup-darwin-x64 (npm)

MAL-2026-12402

Malicious code in new-native-tools-linux-x64-gnu (npm)

MAL-2026-12457

Malicious code in streak-bucket-core (npm)

MAL-2026-12420

Malicious code in prokit-core (npm)

MAL-2026-12409

Malicious code in pfp-block-mobile-past-meetup-list (npm)

MAL-2026-12406

Malicious code in pfa-errors (npm)

MAL-2026-12452

Malicious code in statist-browser-typed-client-sme.platform.mobile.voip.common.events (npm)

MAL-2026-12380

Malicious code in fb-forms-form-boilerplate-contacts (npm)

MAL-2026-12331

Malicious code in @wololasod/tiny-id (npm)

MAL-2026-12495

Malicious code in viem-toolkit (npm)

MAL-2026-12411

Malicious code in pfp-block-mobile-vacancy-description (npm)

MAL-2026-12312

Malicious code in @agenthub-ai/agent (npm)

MAL-2026-12469

Malicious code in streak-math-lib (npm)