Supply Chain Incidents

MAL-2026-11796

Malicious code in @qlik/eslint-config-svelte (npm)

MAL-2026-11793

Malicious code in @qlik/eslint-config (npm)

MAL-2026-11809

Malicious code in @qlik/sprout-react-table (npm)

MAL-2026-11579

Malicious code in @nebula.js/sn-org-chart (npm)

MAL-2026-11580

Malicious code in @nebula.js/sn-shape (npm)

MAL-2026-11586

Malicious code in @nebula.js/theme (npm)

MAL-2026-11800

Malicious code in @qlik/oxlint-config (npm)

MAL-2026-11582

Malicious code in @nebula.js/sn-tabbed-container (npm)

MAL-2026-11567

Malicious code in @nebula.js/cli-sense (npm)

MAL-2026-11803

Malicious code in @qlik/runtime-module-loader (npm)

MAL-2026-11583

Malicious code in @nebula.js/snapshooter (npm)

MAL-2026-11979

Malicious code in picasso.js (npm)

MAL-2026-11573

Malicious code in @nebula.js/sn-distributionplot (npm)

MAL-2026-11977

Malicious code in picasso-plugin-hammer (npm)

MAL-2026-11571

Malicious code in @nebula.js/sn-action-button (npm)

MAL-2026-11789

Malicious code in @qlik/embed-react (npm)

MAL-2026-11565

Malicious code in @nebula.js/cli (npm)

MAL-2026-11625

Malicious code in @onereach/regular-expressions-test (npm)

MAL-2026-11585

Malicious code in @nebula.js/test-utils (npm)

MAL-2026-11799

Malicious code in @qlik/oxfmt-config (npm)

MAL-2026-11792

Malicious code in @qlik/embed-web-components (npm)

MAL-2026-11787

Malicious code in @qlik/design-tokens (npm)

MAL-2026-11569

Malicious code in @nebula.js/locale (npm)

MAL-2026-11577

Malicious code in @nebula.js/sn-map (npm)