Supply Chain Incidents

MAL-2025-192430

Malicious code in bigpyx (PyPI)

MAL-2025-192423

Malicious code in vue2-amis-custom-widget-pro (npm)

MAL-2025-192429

Malicious code in yunxohang3 (npm)

MAL-2025-192428

Malicious code in yunxoahng2 (npm)

MAL-2025-192422

Malicious code in real-time-tweet-streamer (npm)

MAL-2025-192420

Malicious code in near-fast-auth-signer (npm)

MAL-2025-192421

Malicious code in vue2-amis-custom-widget123 (npm)

MAL-2025-192409

Malicious code in ecmascript-runtime-client (npm)

MAL-2025-192404

Malicious code in callback-hook (npm)

MAL-2025-192403

Malicious code in allow-deny (npm)

MAL-2025-192408

Malicious code in ddp-common (npm)

MAL-2025-192414

Malicious code in mongo-decimal (npm)

MAL-2025-192410

Malicious code in facts-base (npm)

MAL-2025-192412

Malicious code in meteor-developer-oauth (npm)

MAL-2025-192413

Malicious code in modules-runtime (npm)

MAL-2025-192417

Malicious code in rum-events-format (npm)

MAL-2025-192411

Malicious code in fastavro (npm)

MAL-2025-192419

Malicious code in wasm-bindgen (npm)

MAL-2025-192416

Malicious code in pymongo (npm)

MAL-2025-192405

Malicious code in confluent-kafka (npm)

MAL-2025-192407

Malicious code in datadog-checks-downloader (npm)

MAL-2025-192418

Malicious code in sfdc-abstract-legend (npm)

MAL-2025-192406

Malicious code in datadog-checks-dependency-provider (npm)

MAL-2025-192415

Malicious code in portal-lim (npm)