Supply Chain Incidents

MAL-2025-191509

Malicious code in debug-common (npm)

MAL-2025-191510

Malicious code in hpi-porsche-app (npm)

MAL-2025-191532

Malicious code in yq-go (npm)

MAL-2025-191500

Malicious code in m365-action-sdk (npm)

MAL-2025-191498

Malicious code in kmf-cookieservice (npm)

MAL-2025-191497

Malicious code in handtalk-test-app (npm)

MAL-2025-191501

Malicious code in old-hd-keyring (npm)

MAL-2025-191495

Malicious code in @bingads-webui-clientcenter/instrumentation (npm)

MAL-2025-191503

Malicious code in start-internal (npm)

MAL-2025-191496

Malicious code in @hand-talk/yotta-core (npm)

MAL-2025-191502

Malicious code in pluxee-design-system (npm)

MAL-2025-191504

Malicious code in testhaus (npm)

MAL-2025-191499

Malicious code in libdebugrouter.so (npm)

MAL-2025-191538

Malicious code in hl-naduccio (npm)

MAL-2025-191603

Malicious code in xmenddddl (npm)

MAL-2025-191602

Malicious code in web-uj65mn (npm)

MAL-2025-191601

Malicious code in web-nbq6lx (npm)

MAL-2025-191600

Malicious code in vite-dynamic-chunks (npm)

MAL-2025-191599

Malicious code in vbails (npm)

MAL-2025-191598

Malicious code in test-dependency-confusion-g3ksec (npm)

MAL-2025-191597

Malicious code in tensor-fi-crypto-utils (npm)

MAL-2025-191596

Malicious code in telegram-api-test (npm)

MAL-2025-191595

Malicious code in tailwindcss-forms (npm)

MAL-2025-191594

Malicious code in tailwind-style-override (npm)