Supply Chain Incidents

MAL-2025-191207

Malicious code in @commute/bloom (npm)

MAL-2025-191206

Malicious code in @cllbk/ghl (npm)

MAL-2025-191205

Malicious code in @clausehq/flows-step-taskscreateurl (npm)

MAL-2025-191204

Malicious code in @clausehq/flows-step-sendgridemail (npm)

MAL-2025-191203

Malicious code in @clausehq/flows-step-mqtt (npm)

MAL-2025-191202

Malicious code in @clausehq/flows-step-jsontoxml (npm)

MAL-2025-191201

Malicious code in @clausehq/flows-step-httprequest (npm)

MAL-2025-191200

Malicious code in @chtijs/eslint-config (npm)

MAL-2025-191246

Malicious code in @micado-digital/stadtmarketing-kufstein-external (npm)

MAL-2025-191458

Malicious code in @medusajs/medusa-oas-cli (npm)

MAL-2025-191457

Malicious code in @medusajs/medusa (npm)

MAL-2025-191456

Malicious code in @medusajs/analytics-posthog (npm)

MAL-2025-191412

Malicious code in quickswap-v2-sdk (npm)

MAL-2025-191245

Malicious code in @lui-ui/lui-vue (npm)

MAL-2025-191411

Malicious code in quickswap-token-lists (npm)

MAL-2025-191244

Malicious code in @lui-ui/lui-tailwindcss (npm)

MAL-2025-191410

Malicious code in quickswap-smart-order-router (npm)

MAL-2025-191243

Malicious code in @lui-ui/lui-nuxt (npm)

MAL-2025-191409

Malicious code in quickswap-sdk (npm)

MAL-2025-191408

Malicious code in quickswap-router-sdk (npm)

MAL-2025-191407

Malicious code in quickswap-default-token-list (npm)

MAL-2025-191239

Malicious code in @kvytech/habbit-e2e-test (npm)

MAL-2025-191406

Malicious code in quickswap-default-staking-list-address (npm)

MAL-2025-191455

Malicious code in @kong/spec-renderer (npm)