Supply Chain Incidents

MAL-2026-312

Malicious code in spire.officejs-externs (npm)

MAL-2026-291

Malicious code in lead-ion (npm)

MAL-2026-259

Malicious code in @riag-libs/pattern-library-react-hooks (npm)

MAL-2026-275

Malicious code in chakra-ui-2--theme-tools (npm)

MAL-2026-260

Malicious code in @servicepoint/vue-project (npm)

MAL-2026-265

Malicious code in @wb-team/uikit-myteam-web (npm)

MAL-2026-320

Malicious code in zis-common-lib (npm)

MAL-2026-293

Malicious code in lusha-micro-app-messages (npm)

MAL-2026-262

Malicious code in @spx-smartsorting/vue (npm)

MAL-2026-280

Malicious code in dws-dx (npm)

MAL-2026-279

Malicious code in dibels8-content (npm)

MAL-2026-304

Malicious code in sd-agent-toolbar-module-client (npm)

MAL-2026-319

Malicious code in vue_frontend_rpc (npm)

MAL-2026-268

Malicious code in assurance-common-components (npm)

MAL-2026-285

Malicious code in focus-trap-v2 (npm)

MAL-2026-263

Malicious code in @spx-workforceops/shared-vue (npm)

MAL-2026-294

Malicious code in lusha-ui-components (npm)

MAL-2026-272

Malicious code in chakra-ui-2--react (npm)

MAL-2026-290

Malicious code in kc-fe-cli (npm)

MAL-2026-311

Malicious code in sparkling-router (npm)

MAL-2026-297

Malicious code in omnicore-ds2-sdk (npm)

MAL-2026-274

Malicious code in chakra-ui-2--styled-system (npm)

MAL-2026-271

Malicious code in bve-react-ui-kit (npm)

MAL-2026-305

Malicious code in sd-ccp-module-client (npm)