Supply Chain Incidents

MAL-2025-190745

Malicious code in @kvytech/medusa-plugin-management (npm)

MAL-2025-190737

Malicious code in @ensdomains/solsha1 (npm)

MAL-2025-190746

Malicious code in @kvytech/medusa-plugin-product-reviews (npm)

MAL-2025-190747

Malicious code in @kvytech/web (npm)

MAL-2025-190781

Malicious code in scgsffcreator (npm)

MAL-2025-190787

Malicious code in vite-plugin-httpfile (npm)

MAL-2025-190726

Malicious code in @ensdomains/curvearithmetics (npm)

MAL-2025-190727

Malicious code in @ensdomains/dnsprovejs (npm)

MAL-2025-190736

Malicious code in @ensdomains/reverse-records (npm)

MAL-2025-190723

Malicious code in @ensdomains/ccip-read-dns-gateway (npm)

MAL-2025-190740

Malicious code in @ensdomains/unicode-confusables (npm)

MAL-2025-190729

Malicious code in @ensdomains/durin-middleware (npm)

MAL-2025-190725

Malicious code in @ensdomains/ccip-read-worker-viem (npm)

MAL-2025-190764

Malicious code in atrix (npm)

MAL-2025-190754

Malicious code in @postman/node-keytar (npm)

MAL-2025-190659

Malicious code in @asyncapi/markdown-template (npm)

MAL-2025-190697

Malicious code in exact-ticker (npm)

MAL-2025-190669

Malicious code in @orbitgtbelgium/orbit-components (npm)

MAL-2025-191722

Malicious code in evil-py-argo-shell (PyPI)

MAL-2025-190700

Malicious code in react-library-setup (npm)

MAL-2025-190668

Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm)

MAL-2025-190667

Malicious code in @ensdomains/eth-ens-namehash (npm)

MAL-2025-190698

Malicious code in orbit-nebula-draw-tools (npm)

MAL-2025-190670

Malicious code in @orbitgtbelgium/time-slider (npm)