Supply Chain Incidents

MAL-2025-190720

Malicious code in @asyncapi/python-paho-template (npm)

MAL-2025-190714

Malicious code in @asyncapi/go-watermill-template (npm)

MAL-2025-190710

Malicious code in @actbase/react-native-less-transformer (npm)

MAL-2025-190717

Malicious code in @asyncapi/java-template (npm)

MAL-2025-190776

Malicious code in medusa-plugin-product-reviews-kvy (npm)

MAL-2025-190713

Malicious code in @aryanhussain/my-angular-lib (npm)

MAL-2025-190768

Malicious code in devstart-cli (npm)

MAL-2025-190770

Malicious code in dotnet-template (npm)

MAL-2025-190765

Malicious code in capacitor-plugin-scgssigninwithgoogle (npm)

MAL-2025-190763

Malicious code in @zapier/eslint-plugin-zapier (npm)

MAL-2025-190766

Malicious code in capacitor-purchase-history (npm)

MAL-2025-190778

Malicious code in posthog-plugin-hello-world (npm)

MAL-2025-190715

Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

MAL-2025-190771

Malicious code in esbuild-plugin-httpfile (npm)

MAL-2025-190722

Malicious code in @ensdomains/blacklist (npm)

MAL-2025-190733

Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm)

MAL-2025-190735

Malicious code in @ensdomains/renewal-widget (npm)

MAL-2025-190738

Malicious code in @ensdomains/test-utils (npm)

MAL-2025-190732

Malicious code in @ensdomains/hackathon-registrar (npm)

MAL-2025-190788

Malicious code in zapier-async-storage (npm)

MAL-2025-190724

Malicious code in @ensdomains/ccip-read-router (npm)

MAL-2025-190718

Malicious code in @asyncapi/nodejs-template (npm)

MAL-2025-190739

Malicious code in @ensdomains/thorin (npm)

MAL-2025-190761

Malicious code in @zapier/babel-preset-zapier (npm)