Sunday 11 Oct 2026

Supply chain compromises

• Malicious release react-dropzone-v4 99.0.0 on npm was a malicious releasereact-dropzone-v4 99.0.0
• Malicious release @s4yhiitestpoc/r2-https 1.0.0 on npm was a malicious release@s4yhiitestpoc/r2-https 1.0.0
• Malicious release @s4yhiitestpoc/r3-https 1.0.0, 0.0.0-stage on npm was a malicious release@s4yhiitestpoc/r3-https 1.0.0, 0.0.0-stage
• Malicious release @s4yhiitestpoc/scan-https-d 1.0.0 on npm was a malicious release@s4yhiitestpoc/scan-https-d 1.0.0
• Malicious release another-very-long-name 2.0.0, 1.0.1, 2.0.1 on npm was a malicious releaseanother-very-long-name 2.0.0, 1.0.1, 2.0.1, 1.1.0
• Malicious release cloudflare_module 3.0.0, 1.0.1, 1.0.0 on npm was a malicious releasecloudflare_module 3.0.0, 1.0.1, 1.0.0, 99.0.1
• Malicious release deposit-limit-fe 100.100.106, 100.100.101, 100.100.102 on npm was a malicious releasedeposit-limit-fe 100.100.106, 100.100.101, 100.100.102
• Malicious release ksp-app 100.100.100 on npm was a malicious releaseksp-app 100.100.100
• Malicious release ksp-client-registry 100.100.100, 100.100.101 on npm was a malicious releaseksp-client-registry 100.100.100, 100.100.101
• Malicious release nested-lib 1.0.0, 1.0.1, 1.1.0 on npm was a malicious releasenested-lib 1.0.0, 1.0.1, 1.1.0
• Malicious release nitro-bundled-dep 99.0.1, 2.0.1, 1.1.0 on npm was a malicious releasenitro-bundled-dep 99.0.1, 2.0.1, 1.1.0, 0.0.1, 1.0.0
• Malicious release nitro-cjs-requirer 1.0.0, 0.0.1, 1.1.0 on npm was a malicious releasenitro-cjs-requirer 1.0.0, 0.0.1, 1.1.0, 2.0.0, 99.0.1, 3.0.0
• Malicious release pay-methods-kmf 100.100.102, 100.100.100, 100.100.101 on npm was a malicious releasepay-methods-kmf 100.100.102, 100.100.100, 100.100.101
• Malicious release react-paginate-v5 99.0.0 on npm was a malicious releasereact-paginate-v5 99.0.0
• Malicious release some-very-long-package-name 2.0.0, 1.0.0, 3.0.0 on npm was a malicious releasesome-very-long-package-name 2.0.0, 1.0.0, 3.0.0, 2.0.1, 99.0.1
• Malicious release airdrop-eligibility-check 0.9.1 on RubyGems was a malicious releaseairdrop-eligibility-check 0.9.1
• Malicious release block-explorer-api 0.9.1 on RubyGems was a malicious releaseblock-explorer-api 0.9.1
• Malicious release btc-fee-estimator 0.9.1 on RubyGems was a malicious releasebtc-fee-estimator 0.9.1
• Malicious release crypto-tax-export 0.9.1 on RubyGems was a malicious releasecrypto-tax-export 0.9.1
• Malicious release defi-yield-calculator 0.9.1 on RubyGems was a malicious releasedefi-yield-calculator 0.9.1
• Malicious release dex-router-abis 0.9.1 on RubyGems was a malicious releasedex-router-abis 0.9.1
• Malicious release erc20-approve-audit 0.9.1 on RubyGems was a malicious releaseerc20-approve-audit 0.9.1
• Malicious release eth-gas-oracle 0.9.1 on RubyGems was a malicious releaseeth-gas-oracle 0.9.1
• Malicious release evm-tx-decoder 0.9.1 on RubyGems was a malicious releaseevm-tx-decoder 0.9.1
• Malicious release gas-refuel-bridge 0.9.1 on RubyGems was a malicious releasegas-refuel-bridge 0.9.1
• Malicious release hd-wallet-generator 0.9.1 on RubyGems was a malicious releasehd-wallet-generator 0.9.1
• Malicious release mev-sandwich-detect 0.9.1 on RubyGems was a malicious releasemev-sandwich-detect 0.9.1
• Malicious release multichain-rpc 0.9.1 on RubyGems was a malicious releasemultichain-rpc 0.9.1
• Malicious release nft-metadata-resolver 0.9.1 on RubyGems was a malicious releasenft-metadata-resolver 0.9.1
• Malicious release perp-funding-rates 0.9.1 on RubyGems was a malicious releaseperp-funding-rates 0.9.1
• Malicious release seed-phrase-validator 0.9.1 on RubyGems was a malicious releaseseed-phrase-validator 0.9.1
• Malicious release sol-mint-utils 0.9.1 on RubyGems was a malicious releasesol-mint-utils 0.9.1
• Malicious release staking-apr-fetcher 0.9.1 on RubyGems was a malicious releasestaking-apr-fetcher 0.9.1
• Malicious release ton-jetton-tools 0.9.1 on RubyGems was a malicious releaseton-jetton-tools 0.9.1
• Malicious release tron-trc20-utils 0.9.1 on RubyGems was a malicious releasetron-trc20-utils 0.9.1
• Malicious release wallet-balance-scanner 0.9.1 on RubyGems was a malicious releasewallet-balance-scanner 0.9.1
• Malicious release wallet-hd-derive 0.9.1 on RubyGems was a malicious releasewallet-hd-derive 0.9.1
• Malicious release web3-signer-kit 0.9.1 on RubyGems was a malicious releaseweb3-signer-kit 0.9.1
• Malicious release xrp-ledger-utils 0.9.1 on RubyGems was a malicious releasexrp-ledger-utils 0.9.1
• Malicious release hridoy-ultimate 8.0.0 on npm was a malicious releasehridoy-ultimate 8.0.0
• Malicious release orderly-plugin-liquidity-heatmap 1.0.0, 1.0.1, 1.0.2 on npm was a malicious releaseorderly-plugin-liquidity-heatmap 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.6
• Malicious release util-foriepft 1.0.0 on npm was a malicious releaseutil-foriepft 1.0.0

10-2410-2310-2210-2110-2010-1910-1810-1710-1610-1510-1410-1310-1210-11Atom feedJSON