Supply Chain Incidents

MAL-2025-192623

Malicious code in chai-async (npm)

MAL-2025-192624

Malicious code in chai-nerd (npm)

MAL-2025-192620

Malicious code in android_teminator_x (npm)

MAL-2025-192616

Malicious code in @pluxee-design-system/core (npm)

MAL-2025-192612

Malicious code in ctfxmlflgcheck (npm)

MAL-2025-192611

Malicious code in ctfparsertna (npm)

MAL-2025-192615

Malicious code in tnactgfds (npm)

MAL-2025-192629

Malicious code in flagstealerfinal (npm)

MAL-2025-192613

Malicious code in my-ctf-package (npm)

MAL-2025-192610

Malicious code in ctfepakageflgs (npm)

MAL-2025-192635

Malicious code in parashaxmgflhg (npm)

MAL-2025-192614

Malicious code in react-enhanced-glow (npm)

MAL-2025-192606

Malicious code in sarumaan_a (npm)

MAL-2025-192604

Malicious code in xbox-bottomnav (npm)

MAL-2025-192603

Malicious code in vitor-js (npm)

MAL-2025-192602

Malicious code in plugin-senna (npm)

MAL-2025-192601

Malicious code in vscode-azure-mcp-server (npm)

MAL-2025-192597

Malicious code in raven-hubspot (npm)

MAL-2025-192600

Malicious code in tailwind-variables (npm)

MAL-2025-192599

Malicious code in tailwind-stylecss (npm)

MAL-2025-192598

Malicious code in bigmathlib (npm)

MAL-2025-192586

Malicious code in dubbo-js-private-workspace (npm)

MAL-2025-192590

Malicious code in example-vue2-micro (npm)

MAL-2025-192593

Malicious code in openhands-frontend (npm)