@tallyui
LPM Firewall blocks 10 packages in the @tallyui npm scope.
OSV/OpenSSF confirms @tallyui/components@1.0.3 as malicious package MAL-2026-3514. Malicious code in @tallyui/components (npm)
OSV/OpenSSF confirms @tallyui/connector-medusa@1.0.3 as malicious package MAL-2026-3515. Malicious code in @tallyui/connector-medusa (npm)
OSV/OpenSSF confirms @tallyui/connector-shopify@1.0.3 as malicious package MAL-2026-3516. Malicious code in @tallyui/connector-shopify (npm)
OSV/OpenSSF confirms @tallyui/connector-vendure@1.0.3 as malicious package MAL-2026-3458. Malicious code in @tallyui/connector-vendure (npm)
OSV/OpenSSF confirms @tallyui/connector-woocommerce@1.0.3 as malicious package MAL-2026-3517. Malicious code in @tallyui/connector-woocommerce (npm)
OSV/OpenSSF confirms @tallyui/core@0.2.3 as malicious package MAL-2026-3603. Malicious code in @tallyui/core (npm)
OSV/OpenSSF confirms @tallyui/database@1.0.3 as malicious package MAL-2026-3518. Malicious code in @tallyui/database (npm)
OSV/OpenSSF confirms @tallyui/pos@0.1.3 as malicious package MAL-2026-3459. Malicious code in @tallyui/pos (npm)
OSV/OpenSSF confirms @tallyui/storage-sqlite@0.2.3 as malicious package MAL-2026-3604. Malicious code in @tallyui/storage-sqlite (npm)
OSV/OpenSSF confirms @tallyui/theme@0.2.3 as malicious package MAL-2026-3519. Malicious code in @tallyui/theme (npm)