Supply Chain Incidents

MAL-2026-263

Malicious code in @spx-workforceops/shared-vue (npm)

MAL-2026-303

Malicious code in sd-active-conversation-module-client (npm)

MAL-2026-309

Malicious code in sd-pdc-module-client (npm)

MAL-2026-261

Malicious code in @spx-delivery/react (npm)

MAL-2026-287

Malicious code in idel2-content (npm)

MAL-2026-294

Malicious code in lusha-ui-components (npm)

MAL-2026-288

Malicious code in insightvm-ui-nav-menus (npm)

MAL-2026-308

Malicious code in sd-navbar-module-client (npm)

MAL-2026-272

Malicious code in chakra-ui-2--react (npm)

MAL-2026-297

Malicious code in omnicore-ds2-sdk (npm)

MAL-2026-274

Malicious code in chakra-ui-2--styled-system (npm)

MAL-2026-266

Malicious code in @wbgo/shared (npm)

MAL-2026-271

Malicious code in bve-react-ui-kit (npm)

MAL-2026-305

Malicious code in sd-ccp-module-client (npm)

MAL-2026-275

Malicious code in chakra-ui-2--theme-tools (npm)

MAL-2026-264

Malicious code in @ux-foundry/palette (npm)

MAL-2026-284

Malicious code in flag-v211 (npm)

MAL-2026-265

Malicious code in @wb-team/uikit-myteam-web (npm)

MAL-2026-268

Malicious code in assurance-common-components (npm)

MAL-2026-267

Malicious code in alf-ui-js (npm)

MAL-2026-283

Malicious code in flag-v21 (npm)

MAL-2026-310

Malicious code in sky1oauth2 (npm)

MAL-2026-307

Malicious code in sd-conversation-history-module-client (npm)

MAL-2026-289

Malicious code in js-observability (npm)