Supply Chain Incidents

MAL-2026-2595

Malicious code in @sports-api/api-sdk (npm)

MAL-2026-2591

Malicious code in @pes-ui/components (npm)

MAL-2026-2585

Malicious code in @hrb-web/nuxt (npm)

MAL-2026-2587

Malicious code in @kucoin-gbiz-next/tools (npm)

MAL-2026-2594

Malicious code in @spoonflower/ui (npm)

MAL-2026-2592

Malicious code in @relxui/react (npm)

MAL-2026-2593

Malicious code in @sage-active/ui (npm)

MAL-2026-2586

Malicious code in @ids-alpha/theme (npm)

MAL-2026-2597

Malicious code in @zgny/onboarding-consumer (npm)

MAL-2026-2583

Malicious code in @hmm-app/api (npm)

MAL-2026-2582

Malicious code in @guards-lib/auth (npm)

MAL-2026-2580

Malicious code in @cash-web/no-hardcoded-font-styles (npm)

MAL-2026-2579

Malicious code in @bookiply/core (npm)

MAL-2026-2584

Malicious code in @hpcc/js-api (npm)

MAL-2026-2622

Malicious code in wm-plugin-wm-smart-tip-dont-embed-tooltip (npm)

MAL-2026-2575

Malicious code in @ascend-ops/web-client (npm)

MAL-2026-2573

Malicious code in @aircall-ecosystem/integrations-msteams-frontend (npm)

MAL-2026-2574

Malicious code in @amplify-js/datastore (npm)

MAL-2026-2578

Malicious code in @bokehjs/core (npm)

MAL-2026-2600

Malicious code in cms-site-api-js-client (npm)

MAL-2026-2607

Malicious code in stats-api-js-client (npm)

MAL-2026-2602

Malicious code in etsy-advocacy (npm)

MAL-2026-2604

Malicious code in ih-icon (npm)

MAL-2026-2598

Malicious code in babel-plugin-fbtee (npm)