Supply Chain Incidents

MAL-2025-191135

Malicious code in normal-store (npm)

MAL-2025-191130

Malicious code in ngx-wooapi (npm)

MAL-2025-191124

Malicious code in lint-staged-imagemin (npm)

MAL-2025-191156

Malicious code in zuper-sdk (npm)

MAL-2025-191129

Malicious code in ngx-useful-swiper-prosenjit (npm)

MAL-2025-191126

Malicious code in luno-api (npm)

MAL-2025-191140

Malicious code in piclite (npm)

MAL-2025-190987

Malicious code in prime-one-table (npm)

MAL-2025-190988

Malicious code in prompt-eng (npm)

MAL-2025-190981

Malicious code in next-styled-nprogress (npm)

MAL-2025-190989

Malicious code in react-component-taggers (npm)

MAL-2025-190980

Malicious code in next-simple-google-analytics (npm)

MAL-2025-190990

Malicious code in react-hook-form-persist (npm)

MAL-2025-190991

Malicious code in react-jam-icons (npm)

MAL-2025-190947

Malicious code in @posthog/plugin-server (npm)

MAL-2025-190992

Malicious code in react-keycloak-context (npm)

MAL-2025-190979

Malicious code in next-circular-dependency (npm)

MAL-2025-190993

Malicious code in react-linear-loader (npm)

MAL-2025-190994

Malicious code in react-micromodal.js (npm)

MAL-2025-190978

Malicious code in nanoreset (npm)

MAL-2025-190995

Malicious code in react-native-datepicker-modal (npm)

MAL-2025-190977

Malicious code in n8n-nodes-vercel-ai-sdk (npm)

MAL-2025-190946

Malicious code in @posthog/drop-events-on-property-plugin (npm)

MAL-2025-190996

Malicious code in react-native-email (npm)