Supply Chain Incidents

MAL-2025-190839

Malicious code in create-hardhat3-app (npm)

MAL-2025-190860

Malicious code in test-foundry-app (npm)

MAL-2025-190847

Malicious code in jan-browser (npm)

MAL-2025-190846

Malicious code in go-template (npm)

MAL-2025-190758

Malicious code in @strapbuild/react-native-perspective-image-cropper (npm)

MAL-2025-190775

Malicious code in manual-billing-system-miniapp-api (npm)

MAL-2025-190774

Malicious code in korea-administrative-area-geo-json-util (npm)

MAL-2025-190706

Malicious code in @actbase/css-to-react-native-transform (npm)

MAL-2025-190741

Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)

MAL-2025-190707

Malicious code in @actbase/node-server (npm)

MAL-2025-190734

Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm)

MAL-2025-190709

Malicious code in @actbase/react-native-fast-image (npm)

MAL-2025-190720

Malicious code in @asyncapi/python-paho-template (npm)

MAL-2025-190714

Malicious code in @asyncapi/go-watermill-template (npm)

MAL-2025-190710

Malicious code in @actbase/react-native-less-transformer (npm)

MAL-2025-190717

Malicious code in @asyncapi/java-template (npm)

MAL-2025-190776

Malicious code in medusa-plugin-product-reviews-kvy (npm)

MAL-2025-190713

Malicious code in @aryanhussain/my-angular-lib (npm)

MAL-2025-190768

Malicious code in devstart-cli (npm)

MAL-2025-190770

Malicious code in dotnet-template (npm)

MAL-2025-190765

Malicious code in capacitor-plugin-scgssigninwithgoogle (npm)

MAL-2025-190763

Malicious code in @zapier/eslint-plugin-zapier (npm)

MAL-2025-190766

Malicious code in capacitor-purchase-history (npm)

MAL-2025-190778

Malicious code in posthog-plugin-hello-world (npm)