Supply Chain Incidents

MAL-2025-190892

Malicious code in @posthog/sendgrid-plugin (npm)

MAL-2025-190922

Malicious code in create-mcp-use-app (npm)

MAL-2025-190924

Malicious code in posthog-docusaurus (npm)

MAL-2025-190888

Malicious code in @posthog/pagerduty-plugin (npm)

MAL-2025-190873

Malicious code in @posthog/automatic-cohorts-plugin (npm)

MAL-2025-190909

Malicious code in @postman/postman-mcp-server (npm)

MAL-2025-190919

Malicious code in @zapier/spectral-api-ruleset (npm)

MAL-2025-190920

Malicious code in @zapier/stubtree (npm)

MAL-2025-190872

Malicious code in @mparpaillon/page (npm)

MAL-2025-190882

Malicious code in @posthog/hedgehog-mode (npm)

MAL-2025-190868

Malicious code in @mcp-use/inspector (npm)

MAL-2025-190878

Malicious code in @posthog/first-time-event-tracker (npm)

MAL-2025-190865

Malicious code in @darwinex/react-custom-scrollbars (npm)

MAL-2025-190914

Malicious code in @sauravthakur/corplib (npm)

MAL-2025-190916

Malicious code in @tezign/html-webpack-plugin (npm)

MAL-2025-190863

Malicious code in @asyncapi/studio (npm)

MAL-2025-190864

Malicious code in ra-data-firebase (npm)

MAL-2025-190858

Malicious code in rollup-plugin-httpfile (npm)

MAL-2025-190802

Malicious code in @caretive/caret-cli (npm)

MAL-2025-190856

Malicious code in poper-react-sdk (npm)

MAL-2025-190857

Malicious code in react-native-worklet-functions (npm)

MAL-2025-190815

Malicious code in @ensdomains/web3modal (npm)

MAL-2025-190852

Malicious code in n8n-nodes-tmdb (npm)

MAL-2025-190854

Malicious code in orbit-boxicons (npm)