Supply Chain Incidents

MAL-2026-6651

Malicious code in @tbe-ui/ides (npm)

MAL-2026-6642

Malicious code in @react-thee/rapier (npm)

MAL-2026-6608

Malicious code in @contenteditor-shared/content-editor-common (npm)

MAL-2026-6607

Malicious code in @content-editor/common (npm)

MAL-2026-6617

Malicious code in @e50/utils (npm)

MAL-2026-6633

Malicious code in @ms-ows/logging (npm)

MAL-2026-6628

Malicious code in @img-hls/vtt.js (npm)

MAL-2026-6635

Malicious code in @orbis-lr-sdk/orbis-lr-sdk (npm)

MAL-2026-6612

Malicious code in @ddh-libs/analytics (npm)

MAL-2026-6611

Malicious code in @cxp-shared/string-utilities (npm)

MAL-2026-6632

Malicious code in @meego-progressive/cdk (npm)

MAL-2026-6619

Malicious code in @fed-sofia/jetify (npm)

MAL-2026-6616

Malicious code in @druidsoft/botframework-directlinejs (npm)

MAL-2026-6626

Malicious code in @hg-aka-prml/tapas-common (npm)

MAL-2026-6643

Malicious code in @reference-web/pmp-i18n (npm)

MAL-2026-6645

Malicious code in @rmlibrary/formatting (npm)

MAL-2026-6636

Malicious code in @partner-apps/ui (npm)

MAL-2026-6646

Malicious code in @sentryx-libraries/auth-interceptor (npm)

MAL-2026-6647

Malicious code in @services-lib/application-http-client (npm)

MAL-2026-6630

Malicious code in @live-backstage-im/communication-chat (npm)

MAL-2026-6634

Malicious code in @multformats/multiaddr (npm)

MAL-2026-6640

Malicious code in @rakuten-rewards/messaging-sdk (npm)

MAL-2026-6641

Malicious code in @rakuten-rewards/messaging-sdk-js (npm)

MAL-2026-6653

Malicious code in alpine-csp (npm)