Supply Chain Incidents

MAL-2026-4581

Malicious code in idlidosa (npm)

MAL-2026-4684

Malicious code in tdpilot (npm)

MAL-2026-4466

Malicious code in @weirdorg/config (npm)

MAL-2026-4481

Malicious code in arc-diag-util (npm)

MAL-2026-4471

Malicious code in @zesyn/zeditor (npm)

MAL-2026-4467

Malicious code in @weirdorg/dotenv (npm)

MAL-2026-4667

Malicious code in seekcode (npm)

MAL-2026-4422

Malicious code in @qwedqwed/axios (npm)

MAL-2026-4199

Malicious code in ts-logger-pack (npm)

MAL-2026-4198

Malicious code in terminal-logger-utils (npm)

MAL-2026-4432

Malicious code in @sec-loans-ui/utils (npm)

MAL-2026-4425

Malicious code in @riskine-frontend/design-elements (npm)

MAL-2026-4183

Malicious code in openclaw-agent (PyPI)

MAL-2026-4661

Malicious code in react-tracked-tony (npm)

MAL-2026-4654

Malicious code in qazaq-cli (npm)

MAL-2026-4648

Malicious code in promptbook-cli (npm)

MAL-2026-4649

Malicious code in promptbook-mcp (npm)

MAL-2026-4560

Malicious code in fca-official-uzair-rajput (npm)

MAL-2026-4665

Malicious code in security-env-loader (npm)

MAL-2026-4459

Malicious code in @touchvue/chat (npm)

MAL-2026-4568

Malicious code in fulcrum-sessions (npm)

MAL-2026-4493

Malicious code in axiosqqq (npm)

MAL-2026-4502

Malicious code in bucket-protocol-sdk-v2 (npm)

MAL-2026-4418

Malicious code in @pluxee-connect/api-client (npm)