Supply Chain Incidents

MAL-2025-190750

Malicious code in @posthog/piscina (npm)

MAL-2025-190786

Malicious code in typeorm-orbit (npm)

MAL-2025-190777

Malicious code in orbit-nebula-editor (npm)

MAL-2025-190759

Malicious code in @trigo/atrix-elasticsearch (npm)

MAL-2025-190753

Malicious code in @posthog/siphash (npm)

MAL-2025-190752

Malicious code in @posthog/rrweb-record (npm)

MAL-2025-190760

Malicious code in @trigo/atrix-soap (npm)

MAL-2025-190772

Malicious code in eslint-config-zeallat-base (npm)

MAL-2025-190716

Malicious code in @asyncapi/java-spring-template (npm)

MAL-2025-190773

Malicious code in iron-shield-miniapp (npm)

MAL-2025-190767

Malicious code in create-glee-app (npm)

MAL-2025-190755

Malicious code in @seung-ju/next (npm)

MAL-2025-190712

Malicious code in @actbase/react-native-tiktok (npm)

MAL-2025-190769

Malicious code in discord-bot-server (npm)

MAL-2025-190756

Malicious code in @seung-ju/openapi-generator (npm)

MAL-2025-190779

Malicious code in react-native-use-modal (npm)

MAL-2025-190757

Malicious code in @seung-ju/react-hooks (npm)

MAL-2025-190711

Malicious code in @actbase/react-native-naver-login (npm)

MAL-2025-190762

Malicious code in @zapier/browserslist-config-zapier (npm)

MAL-2025-190744

Malicious code in @kvytech/medusa-plugin-announcement (npm)

MAL-2025-190743

Malicious code in @kvytech/components (npm)

MAL-2025-190749

Malicious code in @posthog/nuxt (npm)

MAL-2025-190721

Malicious code in @asyncapi/web-component (npm)

MAL-2025-190742

Malicious code in @kvytech/cli (npm)