Supply Chain Incidents

MAL-2025-190937

Malicious code in undefsafe-typed (npm)

MAL-2025-190938

Malicious code in uplandui (npm)

MAL-2025-190939

Malicious code in upload-to-play-store (npm)

MAL-2025-190940

Malicious code in url-encode-decode (npm)

MAL-2025-190941

Malicious code in use-unsaved-changes (npm)

MAL-2025-190942

Malicious code in valid-south-african-id (npm)

MAL-2025-190943

Malicious code in web-scraper-mcp (npm)

MAL-2025-190944

Malicious code in wellness-expert-ng-gallery (npm)

MAL-2025-190933

Malicious code in @ensdomains/ensjs (npm)

MAL-2025-190934

Malicious code in @ensdomains/ensjs-react (npm)

MAL-2025-190929

Malicious code in @ensdomains/ccip-read-cf-worker (npm)

MAL-2025-190935

Malicious code in @ensdomains/op-resolver-contracts (npm)

MAL-2025-190932

Malicious code in @ensdomains/ens-test-env (npm)

MAL-2025-190930

Malicious code in @ensdomains/durin (npm)

MAL-2025-190931

Malicious code in @ensdomains/ens-contracts (npm)

MAL-2025-190882

Malicious code in @posthog/hedgehog-mode (npm)

MAL-2025-190872

Malicious code in @mparpaillon/page (npm)

MAL-2025-190902

Malicious code in @postman/mcp-ui-client (npm)

MAL-2025-190924

Malicious code in posthog-docusaurus (npm)

MAL-2025-190868

Malicious code in @mcp-use/inspector (npm)

MAL-2025-190878

Malicious code in @posthog/first-time-event-tracker (npm)

MAL-2025-190900

Malicious code in @posthog/wizard (npm)

MAL-2025-190892

Malicious code in @posthog/sendgrid-plugin (npm)

MAL-2025-190894

Malicious code in @posthog/taxonomy-plugin (npm)