Supply Chain Incidents

MAL-2026-4497

Malicious code in bingocode (npm)

MAL-2026-4412

Malicious code in @onerjs/procedural-textures (npm)

MAL-2026-4385

Malicious code in @druids/ui (npm)

MAL-2026-4251

Malicious code in harmony-enablers-test-2026 (npm)

MAL-2026-4733

Malicious code in wrld-dev (npm)

MAL-2026-4363

Malicious code in @asura21232/fca-unofficial-nextgen (npm)

MAL-2026-4474

Malicious code in acc-document-editing (npm)

MAL-2026-4774

Malicious code in vulndify-mcp-server (PyPI)

MAL-2026-4444

Malicious code in @shwfed/nuxt (npm)

MAL-2026-4250

Malicious code in wallet-backup-verifier (npm)

MAL-2026-4237

Malicious code in deploy-guard-check (npm)

MAL-2026-4245

Malicious code in pypi-build-verifier (npm)

MAL-2026-4235

Malicious code in credential-verification-cli (npm)

MAL-2026-4234

Malicious code in compliance-check-runner (npm)

MAL-2026-4246

Malicious code in python-env-auditor (npm)

MAL-2026-4232

Malicious code in build-integrity-verify (npm)

MAL-2026-4236

Malicious code in dependency-audit-tool (npm)

MAL-2026-4244

Malicious code in hardhat-gas-profiler-plugin (npm)

MAL-2026-4247

Malicious code in solana-pda-helper (npm)

MAL-2026-4248

Malicious code in solna-web3 (npm)

MAL-2026-4241

Malicious code in foundry-deploy-helper (npm)

MAL-2026-4249

Malicious code in truffle-config-helper (npm)

MAL-2026-4239

Malicious code in etherjs-utils (npm)

MAL-2026-4238

Malicious code in env-security-scanner (npm)