Supply Chain Incidents

MAL-2026-311

Malicious code in sparkling-router (npm)

MAL-2026-295

Malicious code in lusha-widgets (npm)

MAL-2026-317

Malicious code in textual-sorter-lib (npm)

MAL-2026-267

Malicious code in alf-ui-js (npm)

MAL-2026-307

Malicious code in sd-conversation-history-module-client (npm)

MAL-2026-264

Malicious code in @ux-foundry/palette (npm)

MAL-2026-283

Malicious code in flag-v21 (npm)

MAL-2026-302

Malicious code in s3-cache-handler (npm)

MAL-2026-261

Malicious code in @spx-delivery/react (npm)

MAL-2026-260

Malicious code in @servicepoint/vue-project (npm)

MAL-2026-289

Malicious code in js-observability (npm)

MAL-2026-298

Malicious code in omnicore-ds2-sdk2 (npm)

MAL-2026-282

Malicious code in experian-design-system (npm)

MAL-2026-258

Malicious code in webmd-page-common (npm)

MAL-2026-257

Malicious code in silvermine (npm)

MAL-2026-247

Malicious code in ts-tweetnacl (npm)

MAL-2026-246

Malicious code in admin1001 (npm)

MAL-2026-249

Malicious code in @flipster/utils (npm)

MAL-2026-245

Malicious code in cnamts-captcha-component (npm)

MAL-2026-244

Malicious code in helium-module (npm)

MAL-2026-243

Malicious code in francium-web-visitors (npm)

MAL-2026-242

Malicious code in francium-utils (npm)

MAL-2026-241

Malicious code in francium-ui (npm)

MAL-2026-240

Malicious code in extended-path (npm)