Supply Chain Incidents

httpness

MAL-2025-190966

Malicious code in httpness (npm)

hover-design-prototype

MAL-2025-190965

Malicious code in hover-design-prototype (npm)

hopedraw

MAL-2025-190964

Malicious code in hopedraw (npm)

hope-mapboxdraw

MAL-2025-190963

Malicious code in hope-mapboxdraw (npm)

haufe-axera-api-client

MAL-2025-190962

Malicious code in haufe-axera-api-client (npm)

pico-uid

MAL-2025-190986

Malicious code in pico-uid (npm)

pdf-annotation

MAL-2025-190985

Malicious code in pdf-annotation (npm)

parcel-plugin-asset-copier

MAL-2025-190984

Malicious code in parcel-plugin-asset-copier (npm)

package-tester

MAL-2025-190983

Malicious code in package-tester (npm)

orchestrix

MAL-2025-190982

Malicious code in orchestrix (npm)

expressos

MAL-2025-190961

Malicious code in expressos (npm)

eslint-config-nitpicky

MAL-2025-190960

Malicious code in eslint-config-nitpicky (npm)

enforce-branch-name

MAL-2025-190959

Malicious code in enforce-branch-name (npm)

email-deliverability-tester

MAL-2025-190958

Malicious code in email-deliverability-tester (npm)

dont-go

MAL-2025-190957

Malicious code in dont-go (npm)

docusaurus-plugin-vanilla-extract

MAL-2025-190956

Malicious code in docusaurus-plugin-vanilla-extract (npm)

designstudiouiux

MAL-2025-190955

Malicious code in designstudiouiux (npm)

dashboard-empty-state

MAL-2025-190954

Malicious code in dashboard-empty-state (npm)

css-dedoupe

MAL-2025-190953

Malicious code in css-dedoupe (npm)

count-it-down

MAL-2025-190952

Malicious code in count-it-down (npm)

composite-reducer

MAL-2025-190951

Malicious code in composite-reducer (npm)

compare-obj

MAL-2025-190950

Malicious code in compare-obj (npm)

colors-regex

MAL-2025-190949

Malicious code in colors-regex (npm)