Supply Chain Incidents

MAL-2025-191184

Malicious code in @alexadark/reusable-functions (npm)

MAL-2025-191183

Malicious code in @alexadark/gatsby-theme-wordpress-blog (npm)

MAL-2025-191182

Malicious code in @alexadark/gatsby-theme-events (npm)

MAL-2025-191181

Malicious code in @alexadark/amadeus-api (npm)

MAL-2025-191177

Malicious code in @accordproject/template-engine (npm)

MAL-2025-191176

Malicious code in @accordproject/markdown-it-cicero (npm)

MAL-2025-191449

Malicious code in @accordproject/markdown-cli (npm)

MAL-2025-191175

Malicious code in @accordproject/concerto-types (npm)

MAL-2025-191174

Malicious code in @accordproject/concerto-metamodel (npm)

MAL-2025-191173

Malicious code in @accordproject/concerto-linter-default-ruleset (npm)

MAL-2025-191172

Malicious code in @accordproject/concerto-linter (npm)

MAL-2025-191171

Malicious code in @accordproject/concerto-analysis (npm)

MAL-2025-191199

Malicious code in @browserbasehq/stagehand-docs (npm)

MAL-2025-191195

Malicious code in @browserbasehq/mcp (npm)

MAL-2025-191194

Malicious code in @browserbasehq/director-ai (npm)

MAL-2025-191193

Malicious code in @browserbasehq/bb9 (npm)

MAL-2025-191209

Malicious code in @commute/market-data-chartjs (npm)

MAL-2025-191208

Malicious code in @commute/market-data (npm)

MAL-2025-191207

Malicious code in @commute/bloom (npm)

MAL-2025-191206

Malicious code in @cllbk/ghl (npm)

MAL-2025-191205

Malicious code in @clausehq/flows-step-taskscreateurl (npm)

MAL-2025-191204

Malicious code in @clausehq/flows-step-sendgridemail (npm)

MAL-2025-191203

Malicious code in @clausehq/flows-step-mqtt (npm)

MAL-2025-191202

Malicious code in @clausehq/flows-step-jsontoxml (npm)