Supply Chain Incidents

MAL-2025-191176

Malicious code in @accordproject/markdown-it-cicero (npm)

MAL-2025-191449

Malicious code in @accordproject/markdown-cli (npm)

MAL-2025-191175

Malicious code in @accordproject/concerto-types (npm)

MAL-2025-191174

Malicious code in @accordproject/concerto-metamodel (npm)

MAL-2025-191173

Malicious code in @accordproject/concerto-linter-default-ruleset (npm)

MAL-2025-191172

Malicious code in @accordproject/concerto-linter (npm)

MAL-2025-191171

Malicious code in @accordproject/concerto-analysis (npm)

MAL-2025-191199

Malicious code in @browserbasehq/stagehand-docs (npm)

MAL-2025-191195

Malicious code in @browserbasehq/mcp (npm)

MAL-2025-191194

Malicious code in @browserbasehq/director-ai (npm)

MAL-2025-191193

Malicious code in @browserbasehq/bb9 (npm)

MAL-2025-191209

Malicious code in @commute/market-data-chartjs (npm)

MAL-2025-191208

Malicious code in @commute/market-data (npm)

MAL-2025-191207

Malicious code in @commute/bloom (npm)

MAL-2025-191206

Malicious code in @cllbk/ghl (npm)

MAL-2025-191205

Malicious code in @clausehq/flows-step-taskscreateurl (npm)

MAL-2025-191204

Malicious code in @clausehq/flows-step-sendgridemail (npm)

MAL-2025-191203

Malicious code in @clausehq/flows-step-mqtt (npm)

MAL-2025-191202

Malicious code in @clausehq/flows-step-jsontoxml (npm)

MAL-2025-191201

Malicious code in @clausehq/flows-step-httprequest (npm)

MAL-2025-191200

Malicious code in @chtijs/eslint-config (npm)

MAL-2025-191246

Malicious code in @micado-digital/stadtmarketing-kufstein-external (npm)

MAL-2025-191458

Malicious code in @medusajs/medusa-oas-cli (npm)

MAL-2025-191457

Malicious code in @medusajs/medusa (npm)