Supply Chain Incidents

MAL-2026-11791

Malicious code in @qlik/embed-svelte (npm)

MAL-2026-12006

Malicious code in @jsimplify/errno (npm)

MAL-2026-12026

Malicious code in cors-version (npm)

MAL-2026-12027

Malicious code in tailwind-anime (npm)

MAL-2026-11986

Malicious code in server-hemera-mongo (npm)

MAL-2026-11552

Malicious code in @adminide-stack/yantra-mobile (npm)

MAL-2026-11992

Malicious code in workbench-browser-server (npm)

MAL-2026-11961

Malicious code in @workbench-stack/core (npm)

MAL-2026-11798

Malicious code in @qlik/nebula-table-utils (npm)

MAL-2026-11575

Malicious code in @nebula.js/sn-line-chart (npm)

MAL-2026-11574

Malicious code in @nebula.js/sn-layout-container (npm)

MAL-2026-11807

Malicious code in @qlik/sprout-icons (npm)

MAL-2026-11975

Malicious code in http-metrics-middleware (npm)

MAL-2026-11805

Malicious code in @qlik/sprout-design-docs (npm)

MAL-2026-11801

Malicious code in @qlik/prettier-config (npm)

MAL-2026-11784

Malicious code in @qlik/browserslist-config (npm)

MAL-2026-11783

Malicious code in @qlik/api (npm)

MAL-2026-11983

Malicious code in qlik-modifiers (npm)

MAL-2026-11795

Malicious code in @qlik/eslint-config-react (npm)

MAL-2026-11794

Malicious code in @qlik/eslint-config-base (npm)

MAL-2026-11984

Malicious code in qlik-object-conversion (npm)

MAL-2026-11576

Malicious code in @nebula.js/sn-listbox (npm)

MAL-2026-11785

Malicious code in @qlik/carbon-core (npm)

MAL-2026-11790

Malicious code in @qlik/embed-runtime (npm)