Supply Chain Incidents

MAL-2026-13599

Malicious code in dolyame-ui-sortablelist (npm)

MAL-2026-13561

Malicious code in dolyame-ui-contextmenu (npm)

MAL-2026-13570

Malicious code in dolyame-ui-focusstatehoc (npm)

MAL-2026-13556

Malicious code in dolyame-ui-carouselline (npm)

MAL-2026-13533

Malicious code in ded-pwa-c-boxy (npm)

MAL-2026-13572

Malicious code in dolyame-ui-iconspack (npm)

MAL-2026-13594

Malicious code in dolyame-ui-postcssconfig (npm)

MAL-2026-13604

Malicious code in tailwindcss-motion-advanced (npm)

MAL-2026-13569

Malicious code in dolyame-ui-flatcorners (npm)

MAL-2026-13592

Malicious code in dolyame-ui-pageheader (npm)

MAL-2026-13553

Malicious code in dolyame-boxy-independent-bnpl-product-grid (npm)

MAL-2026-13531

Malicious code in damir-cbr-dawdntrnssbf (npm)

MAL-2026-13588

Malicious code in dolyame-ui-mediainfohoc (npm)

MAL-2026-13581

Malicious code in dolyame-ui-inputrange (npm)

MAL-2026-13564

Malicious code in dolyame-ui-dataqa (npm)

MAL-2026-13546

Malicious code in devplatform-spa-plugin-feature-toggle (npm)

MAL-2026-13568

Malicious code in dolyame-ui-eventoutside (npm)

MAL-2026-13543

Malicious code in devplatform-api-v1-resources (npm)

MAL-2026-13538

Malicious code in delivery-ci-cli (npm)

MAL-2026-13521

Malicious code in @rbxst/services (npm)

MAL-2026-13545

Malicious code in devplatform-spa-errors (npm)

MAL-2026-13527

Malicious code in bnpl-blocks-atom-bnpl-checkbox (npm)

MAL-2026-13524

Malicious code in bigops-abstract-entity-data (npm)

MAL-2026-13554

Malicious code in dolyame-ui-buttonstore (npm)