Supply Chain Incidents

MAL-2025-192473

Malicious code in elf-stats-candlelit-train-228 (npm)

MAL-2025-192483

Malicious code in elf-stats-caroling-workshop-885 (npm)

MAL-2025-192539

Malicious code in elf-stats-twinkling-bell-867 (npm)

MAL-2025-192472

Malicious code in elf-stats-candlelit-nutcracker-184 (npm)

MAL-2025-192535

Malicious code in elf-stats-sugarplum-toolkit-176 (npm)

MAL-2025-192515

Malicious code in elf-stats-merry-hammer-791 (npm)

MAL-2025-192485

Malicious code in elf-stats-cheery-northstar-345 (npm)

MAL-2025-192468

Malicious code in yzip (PyPI)

MAL-2025-192543

Malicious code in mw-proto-ts (npm)

MAL-2025-192541

Malicious code in mui-wrapper-icons (npm)

MAL-2025-192542

Malicious code in mui-wrapper-styles (npm)

MAL-2025-192447

Malicious code in elf-stats-snowy-toolkit-186 (npm)

MAL-2025-192455

Malicious code in libxmlhere (npm)

MAL-2025-192465

Malicious code in tnaparserxml (npm)

MAL-2025-192458

Malicious code in libxmljsololo (npm)

MAL-2025-192440

Malicious code in elf-stats-candystriped-snowglobe-426 (npm)

MAL-2025-192449

Malicious code in elf-stats-sugarplum-mitten-141 (npm)

MAL-2025-192463

Malicious code in libxmlussr (npm)

MAL-2025-192459

Malicious code in libxmljsololo3 (npm)

MAL-2025-192444

Malicious code in elf-stats-merry-icicle-449 (npm)

MAL-2025-192453

Malicious code in libxmlfinal4 (npm)

MAL-2025-192451

Malicious code in libxmlfinal (npm)

MAL-2025-192452

Malicious code in libxmlfinal3 (npm)

MAL-2025-192445

Malicious code in elf-stats-silvered-mailbag-755 (npm)