Supply Chain Incidents

MAL-2025-191434

Malicious code in test23112222-api (npm)

MAL-2025-191216

Malicious code in @everreal/validate-esmoduleinterop-imports (npm)

MAL-2025-191435

Malicious code in tiptap-shadcn-vue (npm)

MAL-2025-191215

Malicious code in @everreal/react-charts (npm)

MAL-2025-191436

Malicious code in toonfetch (npm)

MAL-2025-191452

Malicious code in @eventcatalog/generator-asyncapi (npm)

MAL-2025-191437

Malicious code in ts-relay-cursor-paging (npm)

MAL-2025-191438

Malicious code in typeface-antonio-complete (npm)

MAL-2025-191451

Malicious code in @devx-commerce/plugin-discounts (npm)

MAL-2025-191213

Malicious code in @dev-blinq/cucumber_client (npm)

MAL-2025-191330

Malicious code in @vishadtyagi/full-year-calendar (npm)

MAL-2025-191329

Malicious code in @viapip/eslint-config (npm)

MAL-2025-191328

Malicious code in @trpc-rate-limiter/hono (npm)

MAL-2025-191327

Malicious code in @trpc-rate-limiter/cloudflare (npm)

MAL-2025-191326

Malicious code in @trackstar/test-package (npm)

MAL-2025-191325

Malicious code in @trackstar/test-angular-package (npm)

MAL-2025-191324

Malicious code in @trackstar/react-trackstar-link-upgrade (npm)

MAL-2025-191323

Malicious code in @trackstar/react-trackstar-link (npm)

MAL-2025-191322

Malicious code in @trackstar/angular-trackstar-link (npm)

MAL-2025-191321

Malicious code in @sme-ui/aoma-vevasound-metadata-lib (npm)

MAL-2025-191317

Malicious code in @silgi/permission (npm)

MAL-2025-191316

Malicious code in @silgi/openapi (npm)

MAL-2025-191315

Malicious code in @silgi/module-builder (npm)

MAL-2025-191314

Malicious code in @silgi/graphql (npm)