Supply Chain Incidents

MAL-2025-190916

Malicious code in @tezign/html-webpack-plugin (npm)

MAL-2025-190865

Malicious code in @darwinex/react-custom-scrollbars (npm)

MAL-2025-190914

Malicious code in @sauravthakur/corplib (npm)

MAL-2025-190863

Malicious code in @asyncapi/studio (npm)

MAL-2025-190864

Malicious code in ra-data-firebase (npm)

MAL-2025-190858

Malicious code in rollup-plugin-httpfile (npm)

MAL-2025-190802

Malicious code in @caretive/caret-cli (npm)

MAL-2025-190856

Malicious code in poper-react-sdk (npm)

MAL-2025-190857

Malicious code in react-native-worklet-functions (npm)

MAL-2025-190815

Malicious code in @ensdomains/web3modal (npm)

MAL-2025-190852

Malicious code in n8n-nodes-tmdb (npm)

MAL-2025-190854

Malicious code in orbit-boxicons (npm)

MAL-2025-190844

Malicious code in gate-evm-tools-test (npm)

MAL-2025-190817

Malicious code in @louisle2/cortex-js (npm)

MAL-2025-190836

Malicious code in capacitor-plugin-purchase (npm)

MAL-2025-190842

Malicious code in expo-audio-session (npm)

MAL-2025-190835

Malicious code in capacitor-plugin-apptrackingios (npm)

MAL-2025-190818

Malicious code in @markvivanco/app-version-checker (npm)

MAL-2025-190831

Malicious code in asyncapi-preview (npm)

MAL-2025-190833

Malicious code in bytecode-checker-cli (npm)

MAL-2025-190793

Malicious code in @actbase/react-native-devtools (npm)

MAL-2025-190790

Malicious code in @actbase/react-absolute (npm)

MAL-2025-190791

Malicious code in @actbase/react-kakaosdk (npm)

MAL-2025-190850

Malicious code in medusa-plugin-momo (npm)