Supply Chain Incidents

MAL-2026-287

Malicious code in idel2-content (npm)

MAL-2026-266

Malicious code in @wbgo/shared (npm)

MAL-2026-271

Malicious code in bve-react-ui-kit (npm)

MAL-2026-310

Malicious code in sky1oauth2 (npm)

MAL-2026-276

Malicious code in closure-net (npm)

MAL-2026-305

Malicious code in sd-ccp-module-client (npm)

MAL-2026-317

Malicious code in textual-sorter-lib (npm)

MAL-2026-281

Malicious code in eniram-web-common-ui (npm)

MAL-2026-291

Malicious code in lead-ion (npm)

MAL-2026-260

Malicious code in @servicepoint/vue-project (npm)

MAL-2026-267

Malicious code in alf-ui-js (npm)

MAL-2026-277

Malicious code in cognito-auth-plugin (npm)

MAL-2026-265

Malicious code in @wb-team/uikit-myteam-web (npm)

MAL-2026-264

Malicious code in @ux-foundry/palette (npm)

MAL-2026-272

Malicious code in chakra-ui-2--react (npm)

MAL-2026-283

Malicious code in flag-v21 (npm)

MAL-2026-263

Malicious code in @spx-workforceops/shared-vue (npm)

MAL-2026-306

Malicious code in sd-cip-module-client (npm)

MAL-2026-290

Malicious code in kc-fe-cli (npm)

MAL-2026-313

Malicious code in spire.officejs-fonts (npm)

MAL-2026-293

Malicious code in lusha-micro-app-messages (npm)

MAL-2026-309

Malicious code in sd-pdc-module-client (npm)

MAL-2026-288

Malicious code in insightvm-ui-nav-menus (npm)

MAL-2026-308

Malicious code in sd-navbar-module-client (npm)