Supply Chain Incidents

MAL-2025-192607

Malicious code in bigip (PyPI)

MAL-2025-192606

Malicious code in sarumaan_a (npm)

MAL-2025-192605

Malicious code in trondec (PyPI)

MAL-2025-192604

Malicious code in xbox-bottomnav (npm)

MAL-2025-192603

Malicious code in vitor-js (npm)

MAL-2025-192602

Malicious code in plugin-senna (npm)

MAL-2025-192601

Malicious code in vscode-azure-mcp-server (npm)

MAL-2025-192597

Malicious code in raven-hubspot (npm)

MAL-2025-192599

Malicious code in tailwind-stylecss (npm)

MAL-2025-192600

Malicious code in tailwind-variables (npm)

MAL-2025-192598

Malicious code in bigmathlib (npm)

MAL-2025-192593

Malicious code in openhands-frontend (npm)

MAL-2025-192590

Malicious code in example-vue2-micro (npm)

MAL-2025-192586

Malicious code in dubbo-js-private-workspace (npm)

MAL-2025-192595

Malicious code in smart-utils-alice (npm)

MAL-2025-192591

Malicious code in i18never (npm)

MAL-2025-192592

Malicious code in nad-home (npm)

MAL-2025-192596

Malicious code in starling-api (npm)

MAL-2025-192594

Malicious code in prod-natwest (npm)

MAL-2025-192588

Malicious code in elf-stats-fuzzy-wreath-278 (npm)

MAL-2025-192587

Malicious code in elf-stats-aurora-cocoa-911 (npm)

MAL-2025-192584

Malicious code in jsondatatoruby (npm)

MAL-2025-192589

Malicious code in elf-stats-nutmeg-sleigh-350 (npm)

MAL-2025-192585

Malicious code in betterjsloggin (npm)