Supply Chain Incidents

MAL-2026-317

Malicious code in textual-sorter-lib (npm)

MAL-2026-318

Malicious code in victim-package-a (npm)

MAL-2026-295

Malicious code in lusha-widgets (npm)

MAL-2026-278

Malicious code in comstrap (npm)

MAL-2026-310

Malicious code in sky1oauth2 (npm)

MAL-2026-302

Malicious code in s3-cache-handler (npm)

MAL-2026-270

Malicious code in base-ui-vue3 (npm)

MAL-2026-301

Malicious code in react-sitecore-library (npm)

MAL-2026-276

Malicious code in closure-net (npm)

MAL-2026-320

Malicious code in zis-common-lib (npm)

MAL-2026-298

Malicious code in omnicore-ds2-sdk2 (npm)

MAL-2026-314

Malicious code in styled-system-old (npm)

MAL-2026-315

Malicious code in tailwind-merge-v2 (npm)

MAL-2026-300

Malicious code in presentation-test-utilities (npm)

MAL-2026-316

Malicious code in tailwind-merge-v3 (npm)

MAL-2026-286

Malicious code in forms-new-design (npm)

MAL-2026-299

Malicious code in origin_response_handler (npm)

MAL-2026-269

Malicious code in auc-2-lib (npm)

MAL-2026-285

Malicious code in focus-trap-v2 (npm)

MAL-2026-273

Malicious code in chakra-ui-2--react-utils (npm)

MAL-2026-291

Malicious code in lead-ion (npm)

MAL-2026-296

Malicious code in nyse-web-tools-common (npm)

MAL-2026-259

Malicious code in @riag-libs/pattern-library-react-hooks (npm)

MAL-2026-312

Malicious code in spire.officejs-externs (npm)