Supply Chain Incidents

MAL-2025-191472

Malicious code in chai-auth (npm)

MAL-2025-191471

Malicious code in ahmed_salem_t (npm)

MAL-2025-191468

Malicious code in @lokeswari-satyanarayanan/rn-zustand-expo-template (npm)

MAL-2025-191469

Malicious code in bip40 (npm)

MAL-2025-191465

Malicious code in mcp-polymarket (npm)

MAL-2025-191466

Malicious code in rpc-validator (npm)

MAL-2025-191464

Malicious code in mayhem-wma (npm)

MAL-2025-191467

Malicious code in xrpl-api (npm)

MAL-2025-191463

Malicious code in initial-path (npm)

MAL-2025-191462

Malicious code in react-svgs-helper (npm)

MAL-2025-191461

Malicious code in baidu-src-test3 (npm)

MAL-2025-191460

Malicious code in baidu-src-test (npm)

MAL-2025-191459

Malicious code in @vleo-dev/a11y-js-service (npm)

MAL-2025-191362

Malicious code in @voiceflow/npm-package-json-lint-config (npm)

MAL-2025-191291

Malicious code in @posthog/heartbeat-plugin (npm)

MAL-2025-191228

Malicious code in @huntersofbook/auth-vue (npm)

MAL-2025-191402

Malicious code in posthog-js (npm)

MAL-2025-191273

Malicious code in @oku-ui/separator (npm)

MAL-2025-191369

Malicious code in @voiceflow/runtime-client-js (npm)

MAL-2025-191403

Malicious code in prompt-eng-server (npm)

MAL-2025-191389

Malicious code in axios-cancelable (npm)

MAL-2025-191269

Malicious code in @oku-ui/provide (npm)

MAL-2025-191276

Malicious code in @oku-ui/tabs (npm)

MAL-2025-191382

Malicious code in @voiceflow/verror (npm)