Supply Chain Incidents

MAL-2026-12779

Malicious code in devplatform-spa-plugin-s3-module-loader (npm)

MAL-2026-12785

Malicious code in devplatform-spa-tokens (npm)

MAL-2026-12783

Malicious code in devplatform-spa-route-tree (npm)

MAL-2026-12781

Malicious code in devplatform-spa-plugin-suspense (npm)

MAL-2026-12775

Malicious code in devplatform-spa-plugin-root-devtools (npm)

MAL-2026-12784

Malicious code in devplatform-spa-testing (npm)

MAL-2026-12782

Malicious code in devplatform-spa-plugin-thermostat (npm)

MAL-2026-12780

Malicious code in devplatform-spa-plugin-sentry (npm)

MAL-2026-12778

Malicious code in devplatform-spa-plugin-s3-feature-toggle (npm)

MAL-2026-12505

Malicious code in @kyronixai/executer (npm)

MAL-2026-12805

Malicious code in strath (npm)

MAL-2026-12792

Malicious code in gs-uitk-testing-utils (npm)

MAL-2026-12791

Malicious code in gs-uitk-object-utils (npm)

MAL-2026-12808

Malicious code in streak-metric-core (npm)

MAL-2026-12811

Malicious code in ts-poly-utls (npm)

MAL-2026-12540

Malicious code in chai-as-inspired (npm)

MAL-2026-13382

Malicious code in polyclob-api (npm)

MAL-2026-12793

Malicious code in helixbox-connect (npm)

MAL-2026-12797

Malicious code in multi-reqs (npm)

MAL-2026-12671

Malicious code in dc-renewals-layout2 (npm)

MAL-2026-12802

Malicious code in shift-v4-sdk (npm)

MAL-2026-12815

Malicious code in widget-forge (npm)

MAL-2026-12796

Malicious code in messenger-style (npm)

MAL-2026-12798

Malicious code in npm-groat (npm)