Supply Chain Incidents

MAL-2026-12116

Malicious code in tailwind-hide-scrollbar (npm)

MAL-2026-12114

Malicious code in streak-calc-math (npm)

MAL-2026-12084

Malicious code in @ccfly/setup-darwin-arm64 (npm)

MAL-2026-12115

Malicious code in streak-math-calc (npm)

MAL-2026-12109

Malicious code in bip32-js (npm)

MAL-2026-12113

Malicious code in python-bitcoinlib (npm)

MAL-2026-12112

Malicious code in mnemonic-utils (npm)

MAL-2026-12110

Malicious code in ethereum-sign-utils (npm)

MAL-2026-12111

Malicious code in ethers-lib (npm)

MAL-2026-12108

Malicious code in alipclutch-baileys (npm)

MAL-2026-12083

Malicious code in crypto-wallet-sdk (PyPI)

MAL-2026-12082

Malicious code in crypto-trading-toolkit (PyPI)

MAL-2026-12081

Malicious code in bitcoinlib-py (PyPI)

MAL-2026-12080

Malicious code in bip39-py (PyPI)

MAL-2026-12056

Malicious code in @zzzgenesis00/mnemonic-to-key (npm)

MAL-2026-12079

Malicious code in volna-boxy-di-test (npm)

MAL-2026-12055

Malicious code in @zzzgenesis00/docker-api-client (npm)

MAL-2026-12060

Malicious code in beaver-ui-card-large (npm)

MAL-2026-12078

Malicious code in trezor-lib (npm)

MAL-2026-12067

Malicious code in hwi-lib (npm)

MAL-2026-12064

Malicious code in ckcc-protocol (npm)

MAL-2026-12059

Malicious code in bcore-bravo-eslint-config (npm)

MAL-2026-12068

Malicious code in ledger-lib (npm)

MAL-2026-12073

Malicious code in sso-tramvai-module-context-auth (npm)