Supply Chain Incidents

MAL-2025-190645

Malicious code in @posthog/core (npm)

MAL-2025-190648

Malicious code in @zapier/zapier-sdk (npm)

MAL-2025-190803

Malicious code in @ensdomains/cypress-metamask (npm)

MAL-2025-190634

Malicious code in @validate-pubkey/hex (npm)

MAL-2025-190630

Malicious code in parse-session (npm)

MAL-2025-190627

Malicious code in chai-async-chain (npm)

MAL-2025-190631

Malicious code in tailwind-inquirer (npm)

MAL-2025-190632

Malicious code in tailwind-pulse (npm)

MAL-2025-190628

Malicious code in hash-guard (npm)

MAL-2025-190629

Malicious code in loliloli (npm)

MAL-2025-190633

Malicious code in token-verify-passport (npm)

MAL-2025-190626

Malicious code in vue3-transpiler (npm)

MAL-2025-190782

Malicious code in shinhan-limit-scrap (npm)

MAL-2025-190823

Malicious code in @quick-start-soft/quick-markdown-image (npm)

MAL-2025-191306

Malicious code in @quick-start-soft/quick-markdown-print (npm)

MAL-2025-190624

Malicious code in base62-58x (npm)

MAL-2025-190625

Malicious code in lion-second-package (npm)

MAL-2025-190623

Malicious code in cbre-flow-common (npm)

MAL-2025-190622

Malicious code in com.unity.xr.visionos (npm)

MAL-2025-190619

Malicious code in hyatt-ui (npm)

MAL-2025-190618

Malicious code in epicgames-ui (npm)

MAL-2025-190620

Malicious code in lyft-ui (npm)

MAL-2025-190617

Malicious code in doordash-ui (npm)

MAL-2025-190615

Malicious code in snapchat-ui (npm)