Supply Chain Incidents

MAL-2025-190767

Malicious code in create-glee-app (npm)

MAL-2025-190755

Malicious code in @seung-ju/next (npm)

MAL-2025-190712

Malicious code in @actbase/react-native-tiktok (npm)

MAL-2025-190769

Malicious code in discord-bot-server (npm)

MAL-2025-190756

Malicious code in @seung-ju/openapi-generator (npm)

MAL-2025-190779

Malicious code in react-native-use-modal (npm)

MAL-2025-190757

Malicious code in @seung-ju/react-hooks (npm)

MAL-2025-190711

Malicious code in @actbase/react-native-naver-login (npm)

MAL-2025-190762

Malicious code in @zapier/browserslist-config-zapier (npm)

MAL-2025-190744

Malicious code in @kvytech/medusa-plugin-announcement (npm)

MAL-2025-190743

Malicious code in @kvytech/components (npm)

MAL-2025-190749

Malicious code in @posthog/nuxt (npm)

MAL-2025-190721

Malicious code in @asyncapi/web-component (npm)

MAL-2025-190742

Malicious code in @kvytech/cli (npm)

MAL-2025-190745

Malicious code in @kvytech/medusa-plugin-management (npm)

MAL-2025-190737

Malicious code in @ensdomains/solsha1 (npm)

MAL-2025-190746

Malicious code in @kvytech/medusa-plugin-product-reviews (npm)

MAL-2025-190747

Malicious code in @kvytech/web (npm)

MAL-2025-190781

Malicious code in scgsffcreator (npm)

MAL-2025-190787

Malicious code in vite-plugin-httpfile (npm)

MAL-2025-190726

Malicious code in @ensdomains/curvearithmetics (npm)

MAL-2025-190727

Malicious code in @ensdomains/dnsprovejs (npm)

MAL-2025-190736

Malicious code in @ensdomains/reverse-records (npm)

MAL-2025-190723

Malicious code in @ensdomains/ccip-read-dns-gateway (npm)