Supply Chain Incidents

MAL-2025-190905

Malicious code in @postman/pm-bin-macos-x64 (npm)

MAL-2025-190903

Malicious code in @postman/pm-bin-linux-x64 (npm)

MAL-2025-190892

Malicious code in @posthog/sendgrid-plugin (npm)

MAL-2025-190880

Malicious code in @posthog/github-release-tracking-plugin (npm)

MAL-2025-190924

Malicious code in posthog-docusaurus (npm)

MAL-2025-190882

Malicious code in @posthog/hedgehog-mode (npm)

MAL-2025-190902

Malicious code in @postman/mcp-ui-client (npm)

MAL-2025-190871

Malicious code in @mparpaillon/imagesloaded (npm)

MAL-2025-190876

Malicious code in @posthog/databricks-plugin (npm)

MAL-2025-190884

Malicious code in @posthog/kinesis-plugin (npm)

MAL-2025-190873

Malicious code in @posthog/automatic-cohorts-plugin (npm)

MAL-2025-190865

Malicious code in @darwinex/react-custom-scrollbars (npm)

MAL-2025-190914

Malicious code in @sauravthakur/corplib (npm)

MAL-2025-190916

Malicious code in @tezign/html-webpack-plugin (npm)

MAL-2025-190863

Malicious code in @asyncapi/studio (npm)

MAL-2025-190864

Malicious code in ra-data-firebase (npm)

MAL-2025-190858

Malicious code in rollup-plugin-httpfile (npm)

MAL-2025-190802

Malicious code in @caretive/caret-cli (npm)

MAL-2025-190856

Malicious code in poper-react-sdk (npm)

MAL-2025-190857

Malicious code in react-native-worklet-functions (npm)

MAL-2025-190815

Malicious code in @ensdomains/web3modal (npm)

MAL-2025-190852

Malicious code in n8n-nodes-tmdb (npm)

MAL-2025-190854

Malicious code in orbit-boxicons (npm)

MAL-2025-190844

Malicious code in gate-evm-tools-test (npm)