Supply Chain Incidents

MAL-2025-191536

Malicious code in @wxi-dev/serverless-tsc-config (npm)

MAL-2025-191537

Malicious code in cyber-fca (npm)

MAL-2025-191840

Malicious code in python-doenv (PyPI)

MAL-2025-191512

Malicious code in kubebuilder (npm)

MAL-2025-191515

Malicious code in leafygreen-docs (npm)

MAL-2025-191507

Malicious code in b3dtiles-sample (npm)

MAL-2025-191513

Malicious code in kubernetes-controller-tools (npm)

MAL-2025-191525

Malicious code in ripiocoin (npm)

MAL-2025-191518

Malicious code in mongodb-compass (npm)

MAL-2025-191508

Malicious code in dataset-view (npm)

MAL-2025-191532

Malicious code in yq-go (npm)

MAL-2025-191514

Malicious code in kubernetes-helm (npm)

MAL-2025-191526

Malicious code in silentcipherui (npm)

MAL-2025-191521

Malicious code in nova-angular-project (npm)

MAL-2025-191523

Malicious code in privy-frames-v2-demo (npm)

MAL-2025-191506

Malicious code in animation-debug-app (npm)

MAL-2025-191511

Malicious code in iife-sample (npm)

MAL-2025-191527

Malicious code in solana-dev-mcp (npm)

MAL-2025-191530

Malicious code in tilt-ui (npm)

MAL-2025-191516

Malicious code in markdownlint-cli2-action (npm)

MAL-2025-191531

Malicious code in usb_dev (npm)

MAL-2025-191519

Malicious code in mongodb-stitch-server-testutils (npm)

MAL-2025-191528

Malicious code in telesis (npm)

MAL-2025-191524

Malicious code in render-stage (npm)