Supply Chain Incidents

MAL-2026-10988

Malicious code in react-tabulix-ui (npm)

MAL-2026-10989

Malicious code in react-tabulix-virtual (npm)

MAL-2026-10987

Malicious code in react-tabulix-core (npm)

MAL-2026-10968

Malicious code in commonweb-rewards (npm)

MAL-2026-10970

Malicious code in consumerweb-calurls (npm)

MAL-2026-10966

Malicious code in commonweb-card (npm)

MAL-2026-10967

Malicious code in commonweb-moneymovement (npm)

MAL-2026-10972

Malicious code in signzy-field-level-encrypter (npm)

MAL-2026-10969

Malicious code in commonweb-wallet (npm)

MAL-2026-10971

Malicious code in cxpw-offers (npm)

MAL-2026-10965

Malicious code in requestor-util (npm)

MAL-2026-10940

Malicious code in chai-leaf (npm)

MAL-2026-10939

Malicious code in chai-as-reddit (npm)

MAL-2026-10990

Malicious code in ts-vitest (npm)

MAL-2026-11042

Malicious code in faust-cont (npm)

MAL-2026-10928

Malicious code in upjsma (npm)

MAL-2026-10925

Malicious code in tilaver-mfa (npm)

MAL-2026-10924

Malicious code in s3-lambda-dynamodb-cdk (npm)

MAL-2026-10922

Malicious code in lambda-cloudwatch-cdk (npm)

MAL-2026-10921

Malicious code in iot-kfh-s3 (npm)

MAL-2026-10920

Malicious code in alb-lambda-cdk (npm)

MAL-2026-10923

Malicious code in lwc-slds-lbc (npm)

MAL-2026-10906

Malicious code in your-unique-package-name1337 (npm)

MAL-2026-10905

Malicious code in win-build-utils (npm)