Supply Chain Incidents

MAL-2026-313

Malicious code in spire.officejs-fonts (npm)

MAL-2026-290

Malicious code in kc-fe-cli (npm)

MAL-2026-278

Malicious code in comstrap (npm)

MAL-2026-303

Malicious code in sd-active-conversation-module-client (npm)

MAL-2026-270

Malicious code in base-ui-vue3 (npm)

MAL-2026-287

Malicious code in idel2-content (npm)

MAL-2026-279

Malicious code in dibels8-content (npm)

MAL-2026-292

Malicious code in lusha-integrations-widgets (npm)

MAL-2026-273

Malicious code in chakra-ui-2--react-utils (npm)

MAL-2026-318

Malicious code in victim-package-a (npm)

MAL-2026-291

Malicious code in lead-ion (npm)

MAL-2026-266

Malicious code in @wbgo/shared (npm)

MAL-2026-301

Malicious code in react-sitecore-library (npm)

MAL-2026-310

Malicious code in sky1oauth2 (npm)

MAL-2026-276

Malicious code in closure-net (npm)

MAL-2026-320

Malicious code in zis-common-lib (npm)

MAL-2026-281

Malicious code in eniram-web-common-ui (npm)

MAL-2026-259

Malicious code in @riag-libs/pattern-library-react-hooks (npm)

MAL-2026-293

Malicious code in lusha-micro-app-messages (npm)

MAL-2026-262

Malicious code in @spx-smartsorting/vue (npm)

MAL-2026-263

Malicious code in @spx-workforceops/shared-vue (npm)

MAL-2026-280

Malicious code in dws-dx (npm)

MAL-2026-314

Malicious code in styled-system-old (npm)

MAL-2026-304

Malicious code in sd-agent-toolbar-module-client (npm)