Supply Chain Incidents

MAL-2026-11572

Malicious code in @nebula.js/sn-animator (npm)

MAL-2026-11578

Malicious code in @nebula.js/sn-nav-menu (npm)

MAL-2026-11974

Malicious code in hamus.js (npm)

MAL-2026-11622

Malicious code in @onereach/postcss-scoped-selector (npm)

MAL-2026-11867

Malicious code in @servicetitan/feature-spotlight (npm)

MAL-2026-11988

Malicious code in tslint-folder-schema (npm)

MAL-2026-11901

Malicious code in @servicetitan/microfront (npm)

MAL-2026-11925

Malicious code in @servicetitan/startup-mfe-compat (npm)

MAL-2026-11866

Malicious code in @servicetitan/examples (npm)

MAL-2026-11972

Malicious code in folder-lint (npm)

MAL-2026-11918

Malicious code in @servicetitan/standalone-core-feature-gates (npm)

MAL-2026-11834

Malicious code in @servicetitan/carto-charts-rn (npm)

MAL-2026-11902

Malicious code in @servicetitan/microfront-auth (npm)

MAL-2026-11919

Malicious code in @servicetitan/standalone-feature-flags (npm)

MAL-2026-11823

Malicious code in @servicetitan/anvil2-codemods (npm)

MAL-2026-11872

Malicious code in @servicetitan/grid (npm)

MAL-2026-11967

Malicious code in editable-contracts (npm)

MAL-2026-11947

Malicious code in @servicetitan/unit-tests (npm)

MAL-2026-11939

Malicious code in @servicetitan/titan-chatbot-api (npm)

MAL-2026-11935

Malicious code in @servicetitan/titan-chat-ui (npm)

MAL-2026-11828

Malicious code in @servicetitan/anvil2-illustrations (npm)

MAL-2026-11907

Malicious code in @servicetitan/mpa-components (npm)

MAL-2026-11847

Malicious code in @servicetitan/cp-ui (npm)

MAL-2026-11627

Malicious code in @onereach/salesforce-miaw-client (npm)