Supply Chain Incidents

MAL-2025-190765

Malicious code in capacitor-plugin-scgssigninwithgoogle (npm)

MAL-2025-190763

Malicious code in @zapier/eslint-plugin-zapier (npm)

MAL-2025-190766

Malicious code in capacitor-purchase-history (npm)

MAL-2025-190778

Malicious code in posthog-plugin-hello-world (npm)

MAL-2025-190715

Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

MAL-2025-190771

Malicious code in esbuild-plugin-httpfile (npm)

MAL-2025-190733

Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm)

MAL-2025-190722

Malicious code in @ensdomains/blacklist (npm)

MAL-2025-190738

Malicious code in @ensdomains/test-utils (npm)

MAL-2025-190735

Malicious code in @ensdomains/renewal-widget (npm)

MAL-2025-190732

Malicious code in @ensdomains/hackathon-registrar (npm)

MAL-2025-190788

Malicious code in zapier-async-storage (npm)

MAL-2025-190724

Malicious code in @ensdomains/ccip-read-router (npm)

MAL-2025-190718

Malicious code in @asyncapi/nodejs-template (npm)

MAL-2025-190739

Malicious code in @ensdomains/thorin (npm)

MAL-2025-190761

Malicious code in @zapier/babel-preset-zapier (npm)

MAL-2025-190728

Malicious code in @ensdomains/dnssecoraclejs (npm)

MAL-2025-190780

Malicious code in redux-router-kit (npm)

MAL-2025-190730

Malicious code in @ensdomains/ens-avatar (npm)

MAL-2025-190785

Malicious code in token.js-fork (npm)

MAL-2025-190708

Malicious code in @actbase/react-daum-postcode (npm)

MAL-2025-190719

Malicious code in @asyncapi/nodejs-ws-template (npm)

MAL-2025-190748

Malicious code in @posthog/agent (npm)

MAL-2025-190751

Malicious code in @posthog/plugin-contrib (npm)