npm

Records4

1. closed
   Claude Fake Web3 Accelerator Uses Malicious npm Packages to Distribute Malware

   Breaches & attacks · Exploited · since 19 Oct 2026

   AI
2. closed
   MCP servers & tools Postmark MCP Server Package Hijacked for Email Exfiltration

   Supply chain · Exploited · since Sep 2025 (approx.)

   AI
3. closed
   Cline Actor Exploited Cline AI Workflow and Published Unauthorized CLI Package

   Patch now · Exploited · since 17 Feb 2026

   AI
4. closed
   Claude Code + SDKs Malicious Nx npm Packages Weaponize AI Coding Agents for Exfiltration

   Breaches & attacks · Exploited · since 21 Aug 2025

   AI