Supply Chain Incidents

MAL-2025-190942

Malicious code in valid-south-african-id (npm)

MAL-2025-190943

Malicious code in web-scraper-mcp (npm)

MAL-2025-190944

Malicious code in wellness-expert-ng-gallery (npm)

MAL-2025-191769

Malicious code in jsonschemex (PyPI)

MAL-2025-190933

Malicious code in @ensdomains/ensjs (npm)

MAL-2025-190934

Malicious code in @ensdomains/ensjs-react (npm)

MAL-2025-190929

Malicious code in @ensdomains/ccip-read-cf-worker (npm)

MAL-2025-190935

Malicious code in @ensdomains/op-resolver-contracts (npm)

MAL-2025-190932

Malicious code in @ensdomains/ens-test-env (npm)

MAL-2025-190930

Malicious code in @ensdomains/durin (npm)

MAL-2025-190931

Malicious code in @ensdomains/ens-contracts (npm)

MAL-2025-190880

Malicious code in @posthog/github-release-tracking-plugin (npm)

MAL-2025-190871

Malicious code in @mparpaillon/imagesloaded (npm)

MAL-2025-190876

Malicious code in @posthog/databricks-plugin (npm)

MAL-2025-190884

Malicious code in @posthog/kinesis-plugin (npm)

MAL-2025-190909

Malicious code in @postman/postman-mcp-server (npm)

MAL-2025-190898

Malicious code in @posthog/variance-plugin (npm)

MAL-2025-190891

Malicious code in @posthog/rrweb-player (npm)

MAL-2025-190907

Malicious code in @postman/postman-collection-fork (npm)

MAL-2025-190905

Malicious code in @postman/pm-bin-macos-x64 (npm)

MAL-2025-190903

Malicious code in @postman/pm-bin-linux-x64 (npm)

MAL-2025-190892

Malicious code in @posthog/sendgrid-plugin (npm)

MAL-2025-190896

Malicious code in @posthog/twitter-followers-plugin (npm)

MAL-2025-190928

Malicious code in zapier-platform-legacy-scripting-runner (npm)