Supply Chain Incidents

MAL-2026-4608

Malicious code in mcp-server-iehub-proxy (npm)

MAL-2026-4449

Malicious code in @tailwind-core/oxide-win32-x64-msvc (npm)

MAL-2026-4562

Malicious code in figma-d2c-utils (npm)

MAL-2026-4456

Malicious code in @thesignup/cli (npm)

MAL-2026-4465

Malicious code in @web-3d-tool/sdk (npm)

MAL-2026-4440

Malicious code in @serviceshub/x-web-core (npm)

MAL-2026-4554

Malicious code in ethers-wallet-packages (npm)

MAL-2026-4652

Malicious code in python-utils (npm)

MAL-2026-4182

Malicious code in stripe-internal (PyPI)

MAL-2026-4506

Malicious code in cb-wallet-data (npm)

MAL-2026-4702

Malicious code in vestibulect (npm)

MAL-2026-4460

Malicious code in @trackking/core (npm)

MAL-2026-4394

Malicious code in @ikyyofc/gemini-cli (npm)

MAL-2026-4464

Malicious code in @vtmn-play/react (npm)

MAL-2026-4468

Malicious code in @wengine-ai/claude-code-router-shared (npm)

MAL-2026-4709

Malicious code in wallet-agent-ai-radix (npm)

MAL-2026-4534

Malicious code in color-style-utils (npm)

MAL-2026-4181

Malicious code in stripe-commands (PyPI)

MAL-2026-4389

Malicious code in @flipbit2-bb/test-auth-state (npm)

MAL-2026-4379

Malicious code in @deadcode09284814/axios-util (npm)

MAL-2026-4517

Malicious code in chalk-tempalte (npm)

MAL-2026-4528

Malicious code in cloud-pc-templates (npm)

MAL-2026-4557

Malicious code in ezymail (npm)

MAL-2026-4461

Malicious code in @venturo/playwright (npm)