Supply Chain Incidents

MAL-2026-11807

Malicious code in @qlik/sprout-icons (npm)

MAL-2026-11975

Malicious code in http-metrics-middleware (npm)

MAL-2026-11805

Malicious code in @qlik/sprout-design-docs (npm)

MAL-2026-11801

Malicious code in @qlik/prettier-config (npm)

MAL-2026-11784

Malicious code in @qlik/browserslist-config (npm)

MAL-2026-11783

Malicious code in @qlik/api (npm)

MAL-2026-11983

Malicious code in qlik-modifiers (npm)

MAL-2026-11795

Malicious code in @qlik/eslint-config-react (npm)

MAL-2026-11984

Malicious code in qlik-object-conversion (npm)

MAL-2026-11794

Malicious code in @qlik/eslint-config-base (npm)

MAL-2026-11576

Malicious code in @nebula.js/sn-listbox (npm)

MAL-2026-11982

Malicious code in qlik-chart-modules (npm)

MAL-2026-11785

Malicious code in @qlik/carbon-core (npm)

MAL-2026-11790

Malicious code in @qlik/embed-runtime (npm)

MAL-2026-11786

Malicious code in @qlik/carboncopy (npm)

MAL-2026-11969

Malicious code in example-js-project (npm)

MAL-2026-11806

Malicious code in @qlik/sprout-gesture (npm)

MAL-2026-11584

Malicious code in @nebula.js/stardust (npm)

MAL-2026-11568

Malicious code in @nebula.js/cli-serve (npm)

MAL-2026-11978

Malicious code in picasso-plugin-q (npm)

MAL-2026-11810

Malicious code in @qlik/tsconfig (npm)

MAL-2026-11802

Malicious code in @qlik/react-native-simple-grid (npm)

MAL-2026-11581

Malicious code in @nebula.js/sn-slider (npm)

MAL-2026-11804

Malicious code in @qlik/sdk (npm)