@atlassian/aui (>=9.3.22, <=10.0.0-M02), @charcoal-ui/icons (>=3.16.0, <=3.21.0) +116 more potentially affected by CVE-2026-0540 via dompurify (>=2.5.4, <=2.5.8)

dompurify NPM version =2.5.4, =9.3.22, =3.16.0, =3.0.0-beta.0, =3.0.0-beta.0, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240806060533, =0.0.0-canary-20240719153432, =0.0.0-fec-156-react19-20250116105607,...

Malicious code in charcoal-ui (npm)

The package charcoal-ui was found to contain malicious code...

MAL-2025-16796 Malicious code in charcoal-ui (npm)

The package charcoal-ui was found to contain malicious code...