Supply Chain Incidents

MAL-2025-190715

Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

MAL-2025-190771

Malicious code in esbuild-plugin-httpfile (npm)

MAL-2025-190733

Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm)

MAL-2025-190722

Malicious code in @ensdomains/blacklist (npm)

MAL-2025-190738

Malicious code in @ensdomains/test-utils (npm)

MAL-2025-190735

Malicious code in @ensdomains/renewal-widget (npm)

MAL-2025-190732

Malicious code in @ensdomains/hackathon-registrar (npm)

MAL-2025-190788

Malicious code in zapier-async-storage (npm)

MAL-2025-190724

Malicious code in @ensdomains/ccip-read-router (npm)

MAL-2025-190718

Malicious code in @asyncapi/nodejs-template (npm)

MAL-2025-190739

Malicious code in @ensdomains/thorin (npm)

MAL-2025-190761

Malicious code in @zapier/babel-preset-zapier (npm)

MAL-2025-190728

Malicious code in @ensdomains/dnssecoraclejs (npm)

MAL-2025-190780

Malicious code in redux-router-kit (npm)

MAL-2025-190730

Malicious code in @ensdomains/ens-avatar (npm)

MAL-2025-190785

Malicious code in token.js-fork (npm)

MAL-2025-190708

Malicious code in @actbase/react-daum-postcode (npm)

MAL-2025-190719

Malicious code in @asyncapi/nodejs-ws-template (npm)

MAL-2025-190748

Malicious code in @posthog/agent (npm)

MAL-2025-190751

Malicious code in @posthog/plugin-contrib (npm)

MAL-2025-190784

Malicious code in test-hardhat-app (npm)

MAL-2025-190789

Malicious code in zuper-cli (npm)

MAL-2025-190731

Malicious code in @ensdomains/ens-validation (npm)

MAL-2025-190783

Malicious code in skills-use (npm)