Supply Chain Incidents

MAL-2025-191218

Malicious code in @faq-component/core (npm)

MAL-2025-191431

Malicious code in sufetch (npm)

MAL-2025-191217

Malicious code in @everreal/web-analytics (npm)

MAL-2025-191432

Malicious code in tavily-module (npm)

MAL-2025-191216

Malicious code in @everreal/validate-esmoduleinterop-imports (npm)

MAL-2025-191434

Malicious code in test23112222-api (npm)

MAL-2025-191435

Malicious code in tiptap-shadcn-vue (npm)

MAL-2025-191215

Malicious code in @everreal/react-charts (npm)

MAL-2025-191436

Malicious code in toonfetch (npm)

MAL-2025-191452

Malicious code in @eventcatalog/generator-asyncapi (npm)

MAL-2025-191437

Malicious code in ts-relay-cursor-paging (npm)

MAL-2025-191438

Malicious code in typeface-antonio-complete (npm)

MAL-2025-191451

Malicious code in @devx-commerce/plugin-discounts (npm)

MAL-2025-191213

Malicious code in @dev-blinq/cucumber_client (npm)

MAL-2025-191330

Malicious code in @vishadtyagi/full-year-calendar (npm)

MAL-2025-191837

Malicious code in pyrtp (PyPI)

MAL-2025-191329

Malicious code in @viapip/eslint-config (npm)

MAL-2025-191328

Malicious code in @trpc-rate-limiter/hono (npm)

MAL-2025-191327

Malicious code in @trpc-rate-limiter/cloudflare (npm)

MAL-2025-191326

Malicious code in @trackstar/test-package (npm)

MAL-2025-191325

Malicious code in @trackstar/test-angular-package (npm)

MAL-2025-191324

Malicious code in @trackstar/react-trackstar-link-upgrade (npm)

MAL-2025-191323

Malicious code in @trackstar/react-trackstar-link (npm)

MAL-2025-191322

Malicious code in @trackstar/angular-trackstar-link (npm)