Supply Chain Incidents

MAL-2025-191092

Malicious code in firestore-search-engine (npm)

MAL-2025-191116

Malicious code in kill-port (npm)

MAL-2025-191091

Malicious code in feature-flip (npm)

MAL-2025-191121

Malicious code in kwami (npm)

MAL-2025-191090

Malicious code in fat-fingered (npm)

MAL-2025-191137

Malicious code in okta-react-router-6 (npm)

MAL-2025-191122

Malicious code in lang-codes (npm)

MAL-2025-191136

Malicious code in obj-to-css (npm)

MAL-2025-191123

Malicious code in license-o-matic (npm)

MAL-2025-191155

Malicious code in wenk (npm)

MAL-2025-191135

Malicious code in normal-store (npm)

MAL-2025-191130

Malicious code in ngx-wooapi (npm)

MAL-2025-191124

Malicious code in lint-staged-imagemin (npm)

MAL-2025-191156

Malicious code in zuper-sdk (npm)

MAL-2025-191129

Malicious code in ngx-useful-swiper-prosenjit (npm)

MAL-2025-191126

Malicious code in luno-api (npm)

MAL-2025-191140

Malicious code in piclite (npm)

MAL-2025-190987

Malicious code in prime-one-table (npm)

MAL-2025-190988

Malicious code in prompt-eng (npm)

MAL-2025-190981

Malicious code in next-styled-nprogress (npm)

MAL-2025-190989

Malicious code in react-component-taggers (npm)

MAL-2025-190980

Malicious code in next-simple-google-analytics (npm)

MAL-2025-190990

Malicious code in react-hook-form-persist (npm)

MAL-2025-190991

Malicious code in react-jam-icons (npm)