Supply Chain Incidents

MAL-2026-11014

Malicious code in kijai (npm)

MAL-2026-11009

Malicious code in calmora (npm)

MAL-2026-11008

Malicious code in caldryn (npm)

MAL-2026-11010

Malicious code in calvora (npm)

MAL-2026-11018

Malicious code in veldora (npm)

MAL-2026-11019

Malicious code in veskr (npm)

MAL-2026-11016

Malicious code in vantora (npm)

MAL-2026-11017

Malicious code in vectormark (npm)

MAL-2026-11015

Malicious code in react-tabulix-query (npm)

MAL-2026-11040

Malicious code in react-tabulix-extended (npm)

MAL-2026-10982

Malicious code in streak-daycount (npm)

MAL-2026-10981

Malicious code in streak-calendar (npm)

MAL-2026-10983

Malicious code in svelte-streaks (npm)

MAL-2026-10979

Malicious code in @apexfdn/apex (npm)

MAL-2026-10980

Malicious code in nolby (npm)

MAL-2026-10984

Malicious code in veskra (npm)

MAL-2026-10988

Malicious code in react-tabulix-ui (npm)

MAL-2026-10989

Malicious code in react-tabulix-virtual (npm)

MAL-2026-10987

Malicious code in react-tabulix-core (npm)

MAL-2026-10968

Malicious code in commonweb-rewards (npm)

MAL-2026-10970

Malicious code in consumerweb-calurls (npm)

MAL-2026-10966

Malicious code in commonweb-card (npm)

MAL-2026-10967

Malicious code in commonweb-moneymovement (npm)

MAL-2026-10972

Malicious code in signzy-field-level-encrypter (npm)