Supply Chain Incidents

MAL-2026-261

Malicious code in @spx-delivery/react (npm)

MAL-2026-312

Malicious code in spire.officejs-externs (npm)

MAL-2026-294

Malicious code in lusha-ui-components (npm)

MAL-2026-272

Malicious code in chakra-ui-2--react (npm)

MAL-2026-297

Malicious code in omnicore-ds2-sdk (npm)

MAL-2026-274

Malicious code in chakra-ui-2--styled-system (npm)

MAL-2026-271

Malicious code in bve-react-ui-kit (npm)

MAL-2026-285

Malicious code in focus-trap-v2 (npm)

MAL-2026-305

Malicious code in sd-ccp-module-client (npm)

MAL-2026-317

Malicious code in textual-sorter-lib (npm)

MAL-2026-311

Malicious code in sparkling-router (npm)

MAL-2026-265

Malicious code in @wb-team/uikit-myteam-web (npm)

MAL-2026-289

Malicious code in js-observability (npm)

MAL-2026-307

Malicious code in sd-conversation-history-module-client (npm)

MAL-2026-302

Malicious code in s3-cache-handler (npm)

MAL-2026-298

Malicious code in omnicore-ds2-sdk2 (npm)

MAL-2026-277

Malicious code in cognito-auth-plugin (npm)

MAL-2026-314

Malicious code in styled-system-old (npm)

MAL-2026-273

Malicious code in chakra-ui-2--react-utils (npm)

MAL-2026-316

Malicious code in tailwind-merge-v3 (npm)

MAL-2026-270

Malicious code in base-ui-vue3 (npm)

MAL-2026-286

Malicious code in forms-new-design (npm)

MAL-2026-303

Malicious code in sd-active-conversation-module-client (npm)

MAL-2026-287

Malicious code in idel2-content (npm)