Supply Chain Incidents

MAL-2025-191201

Malicious code in @clausehq/flows-step-httprequest (npm)

MAL-2025-191200

Malicious code in @chtijs/eslint-config (npm)

MAL-2025-191246

Malicious code in @micado-digital/stadtmarketing-kufstein-external (npm)

MAL-2025-191458

Malicious code in @medusajs/medusa-oas-cli (npm)

MAL-2025-191457

Malicious code in @medusajs/medusa (npm)

MAL-2025-191456

Malicious code in @medusajs/analytics-posthog (npm)

MAL-2025-191412

Malicious code in quickswap-v2-sdk (npm)

MAL-2025-191245

Malicious code in @lui-ui/lui-vue (npm)

MAL-2025-191411

Malicious code in quickswap-token-lists (npm)

MAL-2025-191244

Malicious code in @lui-ui/lui-tailwindcss (npm)

MAL-2025-191410

Malicious code in quickswap-smart-order-router (npm)

MAL-2025-191243

Malicious code in @lui-ui/lui-nuxt (npm)

MAL-2025-191409

Malicious code in quickswap-sdk (npm)

MAL-2025-191408

Malicious code in quickswap-router-sdk (npm)

MAL-2025-191407

Malicious code in quickswap-default-token-list (npm)

MAL-2025-191239

Malicious code in @kvytech/habbit-e2e-test (npm)

MAL-2025-191406

Malicious code in quickswap-default-staking-list-address (npm)

MAL-2025-191455

Malicious code in @kong/spec-renderer (npm)

MAL-2025-191405

Malicious code in quickswap-default-staking-list (npm)

MAL-2025-191238

Malicious code in @jayeshsadhwani/telemetry-sdk (npm)

MAL-2025-191448

Malicious code in vue-browserupdate-nuxt (npm)

MAL-2025-191237

Malicious code in @ifings/metatron3 (npm)

MAL-2025-191236

Malicious code in @ifings/design-system (npm)

MAL-2025-191446

Malicious code in valuedex-sdk (npm)