Supply Chain Incidents

MAL-2025-190640

Malicious code in @asyncapi/parser (npm)

MAL-2025-190647

Malicious code in @postman/tunnel-agent (npm)

MAL-2025-190643

Malicious code in @asyncapi/specs (npm)

MAL-2025-190645

Malicious code in @posthog/core (npm)

MAL-2025-190648

Malicious code in @zapier/zapier-sdk (npm)

MAL-2025-191794

Malicious code in mongland (PyPI)

MAL-2025-191940

Malicious code in zakuchienne (PyPI)

MAL-2025-190803

Malicious code in @ensdomains/cypress-metamask (npm)

MAL-2025-190634

Malicious code in @validate-pubkey/hex (npm)

MAL-2025-190627

Malicious code in chai-async-chain (npm)

MAL-2025-190630

Malicious code in parse-session (npm)

MAL-2025-190631

Malicious code in tailwind-inquirer (npm)

MAL-2025-190632

Malicious code in tailwind-pulse (npm)

MAL-2025-190628

Malicious code in hash-guard (npm)

MAL-2025-190629

Malicious code in loliloli (npm)

MAL-2025-190633

Malicious code in token-verify-passport (npm)

MAL-2025-190626

Malicious code in vue3-transpiler (npm)

MAL-2025-190782

Malicious code in shinhan-limit-scrap (npm)

MAL-2025-190823

Malicious code in @quick-start-soft/quick-markdown-image (npm)

MAL-2025-191306

Malicious code in @quick-start-soft/quick-markdown-print (npm)

MAL-2025-190624

Malicious code in base62-58x (npm)

MAL-2025-190625

Malicious code in lion-second-package (npm)

MAL-2025-190623

Malicious code in cbre-flow-common (npm)

MAL-2025-191790

Malicious code in mescouilles (PyPI)