Supply Chain Incidents

MAL-2025-191302

Malicious code in @productdevbook/auth (npm)

MAL-2025-191421

Malicious code in selenium-session (npm)

MAL-2025-191381

Malicious code in @voiceflow/utils-designer (npm)

MAL-2025-191413

Malicious code in ra-auth-firebase (npm)

MAL-2025-191192

Malicious code in @bdkinc/knex-ibmi (npm)

MAL-2025-191450

Malicious code in @axinom/mosaic-cli (npm)

MAL-2025-191184

Malicious code in @alexadark/reusable-functions (npm)

MAL-2025-191183

Malicious code in @alexadark/gatsby-theme-wordpress-blog (npm)

MAL-2025-191182

Malicious code in @alexadark/gatsby-theme-events (npm)

MAL-2025-191181

Malicious code in @alexadark/amadeus-api (npm)

MAL-2025-191177

Malicious code in @accordproject/template-engine (npm)

MAL-2025-191176

Malicious code in @accordproject/markdown-it-cicero (npm)

MAL-2025-191449

Malicious code in @accordproject/markdown-cli (npm)

MAL-2025-191175

Malicious code in @accordproject/concerto-types (npm)

MAL-2025-191174

Malicious code in @accordproject/concerto-metamodel (npm)

MAL-2025-191173

Malicious code in @accordproject/concerto-linter-default-ruleset (npm)

MAL-2025-191172

Malicious code in @accordproject/concerto-linter (npm)

MAL-2025-191171

Malicious code in @accordproject/concerto-analysis (npm)

MAL-2025-191199

Malicious code in @browserbasehq/stagehand-docs (npm)

MAL-2025-191195

Malicious code in @browserbasehq/mcp (npm)

MAL-2025-191194

Malicious code in @browserbasehq/director-ai (npm)

MAL-2025-191193

Malicious code in @browserbasehq/bb9 (npm)

MAL-2025-191209

Malicious code in @commute/market-data-chartjs (npm)

MAL-2025-191208

Malicious code in @commute/market-data (npm)