Supply Chain Incidents

MAL-2025-191021

Malicious code in template-lib (npm)

MAL-2025-191022

Malicious code in template-micro-service (npm)

MAL-2025-191023

Malicious code in tenacious-fetch (npm)

MAL-2025-191024

Malicious code in tiaan (npm)

MAL-2025-190936

Malicious code in typefence (npm)

MAL-2025-190937

Malicious code in undefsafe-typed (npm)

MAL-2025-190938

Malicious code in uplandui (npm)

MAL-2025-190939

Malicious code in upload-to-play-store (npm)

MAL-2025-190940

Malicious code in url-encode-decode (npm)

MAL-2025-190941

Malicious code in use-unsaved-changes (npm)

MAL-2025-190942

Malicious code in valid-south-african-id (npm)

MAL-2025-190943

Malicious code in web-scraper-mcp (npm)

MAL-2025-190944

Malicious code in wellness-expert-ng-gallery (npm)

MAL-2025-191769

Malicious code in jsonschemex (PyPI)

MAL-2025-190933

Malicious code in @ensdomains/ensjs (npm)

MAL-2025-190934

Malicious code in @ensdomains/ensjs-react (npm)

MAL-2025-190929

Malicious code in @ensdomains/ccip-read-cf-worker (npm)

MAL-2025-190935

Malicious code in @ensdomains/op-resolver-contracts (npm)

MAL-2025-190932

Malicious code in @ensdomains/ens-test-env (npm)

MAL-2025-190930

Malicious code in @ensdomains/durin (npm)

MAL-2025-190931

Malicious code in @ensdomains/ens-contracts (npm)

MAL-2025-190891

Malicious code in @posthog/rrweb-player (npm)

MAL-2025-190894

Malicious code in @posthog/taxonomy-plugin (npm)

MAL-2025-190918

Malicious code in @zapier/mcp-integration (npm)