Supply Chain Incidents

MAL-2026-277

Malicious code in cognito-auth-plugin (npm)

MAL-2026-302

Malicious code in s3-cache-handler (npm)

MAL-2026-284

Malicious code in flag-v211 (npm)

MAL-2026-315

Malicious code in tailwind-merge-v2 (npm)

MAL-2026-298

Malicious code in omnicore-ds2-sdk2 (npm)

MAL-2026-314

Malicious code in styled-system-old (npm)

MAL-2026-273

Malicious code in chakra-ui-2--react-utils (npm)

MAL-2026-306

Malicious code in sd-cip-module-client (npm)

MAL-2026-288

Malicious code in insightvm-ui-nav-menus (npm)

MAL-2026-308

Malicious code in sd-navbar-module-client (npm)

MAL-2026-300

Malicious code in presentation-test-utilities (npm)

MAL-2026-267

Malicious code in alf-ui-js (npm)

MAL-2026-299

Malicious code in origin_response_handler (npm)

MAL-2026-283

Malicious code in flag-v21 (npm)

MAL-2026-317

Malicious code in textual-sorter-lib (npm)

MAL-2026-289

Malicious code in js-observability (npm)

MAL-2026-303

Malicious code in sd-active-conversation-module-client (npm)

MAL-2026-269

Malicious code in auc-2-lib (npm)

MAL-2026-316

Malicious code in tailwind-merge-v3 (npm)

MAL-2026-287

Malicious code in idel2-content (npm)

MAL-2026-318

Malicious code in victim-package-a (npm)

MAL-2026-266

Malicious code in @wbgo/shared (npm)

MAL-2026-286

Malicious code in forms-new-design (npm)

MAL-2026-295

Malicious code in lusha-widgets (npm)