Supply Chain Incidents

MAL-2025-192612

Malicious code in ctfxmlflgcheck (npm)

MAL-2025-192615

Malicious code in tnactgfds (npm)

MAL-2025-192635

Malicious code in parashaxmgflhg (npm)

MAL-2025-192613

Malicious code in my-ctf-package (npm)

MAL-2025-192629

Malicious code in flagstealerfinal (npm)

MAL-2025-192610

Malicious code in ctfepakageflgs (npm)

MAL-2025-192614

Malicious code in react-enhanced-glow (npm)

MAL-2025-192606

Malicious code in sarumaan_a (npm)

MAL-2025-192604

Malicious code in xbox-bottomnav (npm)

MAL-2025-192603

Malicious code in vitor-js (npm)

MAL-2025-192602

Malicious code in plugin-senna (npm)

MAL-2025-192601

Malicious code in vscode-azure-mcp-server (npm)

MAL-2025-192597

Malicious code in raven-hubspot (npm)

MAL-2025-192600

Malicious code in tailwind-variables (npm)

MAL-2025-192599

Malicious code in tailwind-stylecss (npm)

MAL-2025-192598

Malicious code in bigmathlib (npm)

MAL-2025-192586

Malicious code in dubbo-js-private-workspace (npm)

MAL-2025-192590

Malicious code in example-vue2-micro (npm)

MAL-2025-192593

Malicious code in openhands-frontend (npm)

MAL-2025-192592

Malicious code in nad-home (npm)

MAL-2025-192595

Malicious code in smart-utils-alice (npm)

MAL-2025-192591

Malicious code in i18never (npm)

MAL-2025-192594

Malicious code in prod-natwest (npm)

MAL-2025-192596

Malicious code in starling-api (npm)