Supply Chain Incidents

MAL-2026-2997

Malicious code in @stlm/common-ui (npm)

MAL-2026-2995

Malicious code in color-studio (npm)

MAL-2026-2996

Malicious code in sparkling-sdk (npm)

MAL-2026-2993

Malicious code in @openwebconcept/design-tokens (npm)

MAL-2026-2994

Malicious code in @openwebconcept/theme-owc (npm)

MAL-2026-2992

Malicious code in @automagik/genie (npm)

MAL-2026-2991

Malicious code in pgserve (npm)

MAL-2026-2985

Malicious code in @bmg-web/bmg-dialog (npm)

MAL-2026-2983

Malicious code in @bmg-web/bmg-checkbox (npm)

MAL-2026-2990

Malicious code in etsyapp (npm)

MAL-2026-2984

Malicious code in @bmg-web/bmg-collapse (npm)

MAL-2026-2988

Malicious code in @bmg-web/bmg-grid (npm)

MAL-2026-2981

Malicious code in @bmg-web/bmg-button (npm)

MAL-2026-2986

Malicious code in @bmg-web/bmg-dropdown (npm)

MAL-2026-2980

Malicious code in @bmg-web/bmg-ajax (npm)

MAL-2026-2989

Malicious code in @bmg-web-features/bmg-user-interaction-tracker (npm)

MAL-2026-2982

Malicious code in @bmg-web/bmg-card (npm)

MAL-2026-2987

Malicious code in @bmg-web/bmg-external-link (npm)

MAL-2026-2979

Malicious code in tsdoc-build-rig (npm)

MAL-2026-2978

Malicious code in @oec-settlement/react-router (npm)

MAL-2026-2975

Malicious code in crypto-keccak-js (npm)

MAL-2026-2977

Malicious code in ts-utils-dev (npm)

MAL-2026-2976

Malicious code in gleb-js (npm)

MAL-2026-2973

Malicious code in claudcode-cli (npm)