Supply Chain Incidents

MAL-2026-261

Malicious code in @spx-delivery/react (npm)

MAL-2026-302

Malicious code in s3-cache-handler (npm)

MAL-2026-278

Malicious code in comstrap (npm)

MAL-2026-298

Malicious code in omnicore-ds2-sdk2 (npm)

MAL-2026-297

Malicious code in omnicore-ds2-sdk (npm)

MAL-2026-270

Malicious code in base-ui-vue3 (npm)

MAL-2026-301

Malicious code in react-sitecore-library (npm)

MAL-2026-314

Malicious code in styled-system-old (npm)

MAL-2026-320

Malicious code in zis-common-lib (npm)

MAL-2026-273

Malicious code in chakra-ui-2--react-utils (npm)

MAL-2026-285

Malicious code in focus-trap-v2 (npm)

MAL-2026-259

Malicious code in @riag-libs/pattern-library-react-hooks (npm)

MAL-2026-284

Malicious code in flag-v211 (npm)

MAL-2026-294

Malicious code in lusha-ui-components (npm)

MAL-2026-311

Malicious code in sparkling-router (npm)

MAL-2026-274

Malicious code in chakra-ui-2--styled-system (npm)

MAL-2026-315

Malicious code in tailwind-merge-v2 (npm)

MAL-2026-300

Malicious code in presentation-test-utilities (npm)

MAL-2026-275

Malicious code in chakra-ui-2--theme-tools (npm)

MAL-2026-316

Malicious code in tailwind-merge-v3 (npm)

MAL-2026-303

Malicious code in sd-active-conversation-module-client (npm)

MAL-2026-286

Malicious code in forms-new-design (npm)

MAL-2026-287

Malicious code in idel2-content (npm)

MAL-2026-266

Malicious code in @wbgo/shared (npm)