Supply Chain Incidents

MAL-2025-190851

Malicious code in medusa-plugin-zalopay (npm)

MAL-2025-190824

Malicious code in @quick-start-soft/quick-task-refine (npm)

MAL-2025-190816

Malicious code in @kvytech/medusa-plugin-newsletter (npm)

MAL-2025-190861

Malicious code in zapier-scripts (npm)

MAL-2025-190799

Malicious code in @asyncapi/keeper (npm)

MAL-2025-190806

Malicious code in @ensdomains/mock (npm)

MAL-2025-190804

Malicious code in @ensdomains/dnssec-oracle-anchors (npm)

MAL-2025-190805

Malicious code in @ensdomains/ens-archived-contracts (npm)

MAL-2025-190830

Malicious code in @zapier/ai-actions (npm)

MAL-2025-190808

Malicious code in @ensdomains/offchain-resolver-contracts (npm)

MAL-2025-190801

Malicious code in @asyncapi/server-api (npm)

MAL-2025-190807

Malicious code in @ensdomains/name-wrapper (npm)

MAL-2025-190839

Malicious code in create-hardhat3-app (npm)

MAL-2025-190860

Malicious code in test-foundry-app (npm)

MAL-2025-190847

Malicious code in jan-browser (npm)

MAL-2025-190846

Malicious code in go-template (npm)

MAL-2025-190758

Malicious code in @strapbuild/react-native-perspective-image-cropper (npm)

MAL-2025-190775

Malicious code in manual-billing-system-miniapp-api (npm)

MAL-2025-190774

Malicious code in korea-administrative-area-geo-json-util (npm)

MAL-2025-190706

Malicious code in @actbase/css-to-react-native-transform (npm)

MAL-2025-190741

Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)

MAL-2025-190707

Malicious code in @actbase/node-server (npm)

MAL-2025-190734

Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm)

MAL-2025-190709

Malicious code in @actbase/react-native-fast-image (npm)