Supply Chain Incidents

MAL-2026-4206

Malicious code in deployment-key-auditor (npm)

MAL-2026-4205

Malicious code in defi-threat-scanner (npm)

MAL-2026-4218

Malicious code in solidity-deploy-guard (npm)

MAL-2026-4525

Malicious code in claude-internal-utils (npm)

MAL-2026-4201

Malicious code in obs-migrate (PyPI)

MAL-2026-4376

Malicious code in @cometix/claude-code (npm)

MAL-2026-4397

Malicious code in @jemavidev/betteragents-pi (npm)

MAL-2026-4675

Malicious code in supership-scan (npm)

MAL-2026-4539

Malicious code in create-kachow (npm)

MAL-2026-4516

Malicious code in chain-async-test (npm)

MAL-2026-4705

Malicious code in vite-json-config (npm)

MAL-2026-4445

Malicious code in @signetai/signet-memory-openclaw (npm)

MAL-2026-4403

Malicious code in @link-assistant/hive-mind (npm)

MAL-2026-4386

Malicious code in @elvatis_com/openclaw-cli-bridge-elvatis (npm)

MAL-2026-4377

Malicious code in @ctrl/plex (npm)

MAL-2026-4448

Malicious code in @tailwind-core/oxide-linux-x64-gnu (npm)

MAL-2026-4364

Malicious code in @aswinsparky/api (npm)

MAL-2026-4195

Malicious code in instal (PyPI)

MAL-2026-4499

Malicious code in bolt-delivery-menu-app (npm)

MAL-2026-4430

Malicious code in @saidddddddddd/somethingelse (npm)

MAL-2026-4360

Malicious code in @aledan007/tester (npm)

MAL-2026-4463

Malicious code in @vivaux/telemetry (npm)

MAL-2026-4507

Malicious code in cb-wallet-http (npm)

MAL-2026-4553

Malicious code in ethers-wallet-package (npm)