Malicious code in wallarm-design-system (npm)

The npm package wallarm-design-system at version 1.1.0 has been identified as containing malicious code, classified under MAL-2026-7434 and GHSA-9j5f-jhv8-w4f2. This is a supply chain threat involving a malicious package rather than a vulnerability in the code itself. There is no detailed technical data or vendor advisory available to clarify the nature of the malicious code or its impact.

The presence of malicious code in the package could lead to compromise of systems that install or use this specific version (1.1.0) of wallarm-design-system. However, no known active exploitation has been reported. The impact depends on the malicious payload and usage context but is potentially serious given the nature of malicious packages.

No official patch or remediation guidance is available. Users should avoid using wallarm-design-system version 1.1.0 and verify the integrity of packages before installation. Monitoring for updates or advisories from the package maintainers or npm is recommended. Since no vendor advisory is provided, patch status is not yet confirmed — check the vendor advisory for current remediation guidance.