Supply Chain Incidents

MAL-2025-192457

Malicious code in libxmljs2var234 (npm)

MAL-2025-192464

Malicious code in ofjaaah12 (npm)

MAL-2025-192449

Malicious code in elf-stats-sugarplum-mitten-141 (npm)

MAL-2025-192445

Malicious code in elf-stats-silvered-mailbag-755 (npm)

MAL-2025-192456

Malicious code in libxmljs10 (npm)

MAL-2025-192450

Malicious code in fadafas3 (npm)

MAL-2025-192442

Malicious code in elf-stats-ember-stockpile-448 (npm)

MAL-2025-192448

Malicious code in elf-stats-sparkly-snowglobe-243 (npm)

MAL-2025-192462

Malicious code in libxmlpupupu (npm)

MAL-2025-192434

Malicious code in @cheqplease/structured-logger (npm)

MAL-2025-192433

Malicious code in mws-common-ui (npm)

MAL-2025-192423

Malicious code in vue2-amis-custom-widget-pro (npm)

MAL-2025-192429

Malicious code in yunxohang3 (npm)

MAL-2025-192428

Malicious code in yunxoahng2 (npm)

MAL-2025-192422

Malicious code in real-time-tweet-streamer (npm)

MAL-2025-192420

Malicious code in near-fast-auth-signer (npm)

MAL-2025-192421

Malicious code in vue2-amis-custom-widget123 (npm)

MAL-2025-192410

Malicious code in facts-base (npm)

MAL-2025-192412

Malicious code in meteor-developer-oauth (npm)

MAL-2025-192408

Malicious code in ddp-common (npm)

MAL-2025-192409

Malicious code in ecmascript-runtime-client (npm)

MAL-2025-192403

Malicious code in allow-deny (npm)

MAL-2025-192413

Malicious code in modules-runtime (npm)

MAL-2025-192404

Malicious code in callback-hook (npm)