Supply Chain Incidents

MAL-2025-192599

Malicious code in tailwind-stylecss (npm)

MAL-2025-192598

Malicious code in bigmathlib (npm)

MAL-2025-192590

Malicious code in example-vue2-micro (npm)

MAL-2025-192593

Malicious code in openhands-frontend (npm)

MAL-2025-192586

Malicious code in dubbo-js-private-workspace (npm)

MAL-2025-192595

Malicious code in smart-utils-alice (npm)

MAL-2025-192591

Malicious code in i18never (npm)

MAL-2025-192592

Malicious code in nad-home (npm)

MAL-2025-192594

Malicious code in prod-natwest (npm)

MAL-2025-192596

Malicious code in starling-api (npm)

MAL-2025-192587

Malicious code in elf-stats-aurora-cocoa-911 (npm)

MAL-2025-192588

Malicious code in elf-stats-fuzzy-wreath-278 (npm)

MAL-2025-192584

Malicious code in jsondatatoruby (npm)

MAL-2025-192589

Malicious code in elf-stats-nutmeg-sleigh-350 (npm)

MAL-2025-192585

Malicious code in betterjsloggin (npm)

MAL-2025-192583

Malicious code in swissid-common (npm)

MAL-2025-192582

Malicious code in sds-swissid-common (npm)

MAL-2025-192580

Malicious code in sds-auth-ui (npm)

MAL-2025-192581

Malicious code in sds-oauth-client (npm)

MAL-2025-192579

Malicious code in smtblib (PyPI)

MAL-2025-192578

Malicious code in xboxlive-auth (npm)

MAL-2025-192574

Malicious code in bignumex (npm)

MAL-2025-192575

Malicious code in polygon-src (npm)

MAL-2025-192573

Malicious code in @revvity-signals/chemdraw-js (npm)