Supply Chain Incidents

MAL-2026-287

Malicious code in idel2-content (npm)

MAL-2026-266

Malicious code in @wbgo/shared (npm)

MAL-2026-290

Malicious code in kc-fe-cli (npm)

MAL-2026-310

Malicious code in sky1oauth2 (npm)

MAL-2026-276

Malicious code in closure-net (npm)

MAL-2026-275

Malicious code in chakra-ui-2--theme-tools (npm)

MAL-2026-281

Malicious code in eniram-web-common-ui (npm)

MAL-2026-264

Malicious code in @ux-foundry/palette (npm)

MAL-2026-301

Malicious code in react-sitecore-library (npm)

MAL-2026-313

Malicious code in spire.officejs-fonts (npm)

MAL-2026-263

Malicious code in @spx-workforceops/shared-vue (npm)

MAL-2026-267

Malicious code in alf-ui-js (npm)

MAL-2026-292

Malicious code in lusha-integrations-widgets (npm)

MAL-2026-320

Malicious code in zis-common-lib (npm)

MAL-2026-306

Malicious code in sd-cip-module-client (npm)

MAL-2026-309

Malicious code in sd-pdc-module-client (npm)

MAL-2026-288

Malicious code in insightvm-ui-nav-menus (npm)

MAL-2026-308

Malicious code in sd-navbar-module-client (npm)

MAL-2026-300

Malicious code in presentation-test-utilities (npm)

MAL-2026-315

Malicious code in tailwind-merge-v2 (npm)

MAL-2026-282

Malicious code in experian-design-system (npm)

MAL-2026-255

Malicious code in haqawi (PyPI)

MAL-2026-256

Malicious code in legendevil1 (PyPI)

MAL-2026-254

Malicious code in hairest (PyPI)