Supply Chain Incidents

MAL-2026-4673

Malicious code in sparkecoder (npm)

MAL-2026-4472

Malicious code in @zhengshuo888/huoke (npm)

MAL-2026-4573

Malicious code in git-userhub (npm)

MAL-2026-4365

Malicious code in @atlisp/mcp (npm)

MAL-2026-4526

Malicious code in claw_messenger (npm)

MAL-2026-4549

Malicious code in dot-utils-plus (npm)

MAL-2026-4414

Malicious code in @onerjs/smart-filters (npm)

MAL-2026-4470

Malicious code in @zentrix23/baileys (npm)

MAL-2026-4558

Malicious code in fastgrc-openclaw (npm)

MAL-2026-4642

Malicious code in polygon-toolkit-validate (npm)

MAL-2026-4666

Malicious code in seedcode-facturacion-electronica (npm)

MAL-2026-4510

Malicious code in cerebrum-core (npm)

MAL-2026-4382

Malicious code in @djessicatony/folk-mcp-canary (npm)

MAL-2026-4391

Malicious code in @gad360/apothem (npm)

MAL-2026-4617

Malicious code in n8n-nodes-pentest-rce (npm)

MAL-2026-4626

Malicious code in omnius (npm)

MAL-2026-4401

Malicious code in @kruzer/lib-ui (npm)

MAL-2026-4479

Malicious code in anthropic-shared-logger (npm)

MAL-2026-4205

Malicious code in defi-threat-scanner (npm)

MAL-2026-4219

Malicious code in wallet-security-checker (npm)

MAL-2026-4214

Malicious code in polymarket-terminal (npm)

MAL-2026-4216

Malicious code in polymarket-trader (npm)

MAL-2026-4204

Malicious code in defi-env-auditor (npm)

MAL-2026-4208

Malicious code in mnemonic-safety-check (npm)