Supply Chain Incidents

MAL-2025-192633

Malicious code in hubstyletokens (npm)

MAL-2025-192630

Malicious code in foundations-theming-base (npm)

MAL-2025-192634

Malicious code in okta-mfa-library (npm)

MAL-2025-192632

Malicious code in hubspotter-http (npm)

MAL-2025-192644

Malicious code in usage-tracker-janus (npm)

MAL-2025-192617

Malicious code in @xyuxu/i18never (npm)

MAL-2025-192631

Malicious code in graphlink (npm)

MAL-2025-192640

Malicious code in tailwind-animationbased (npm)

MAL-2025-192642

Malicious code in tailwind-logic (npm)

MAL-2025-192641

Malicious code in tailwind-color-shine (npm)

MAL-2025-192627

Malicious code in elf-stats-sugarplum-fir-770 (npm)

MAL-2025-192623

Malicious code in chai-async (npm)

MAL-2025-192624

Malicious code in chai-nerd (npm)

MAL-2025-192620

Malicious code in android_teminator_x (npm)

MAL-2025-192616

Malicious code in @pluxee-design-system/core (npm)

MAL-2025-192611

Malicious code in ctfparsertna (npm)

MAL-2025-192612

Malicious code in ctfxmlflgcheck (npm)

MAL-2025-192629

Malicious code in flagstealerfinal (npm)

MAL-2025-192613

Malicious code in my-ctf-package (npm)

MAL-2025-192635

Malicious code in parashaxmgflhg (npm)

MAL-2025-192615

Malicious code in tnactgfds (npm)

MAL-2025-192610

Malicious code in ctfepakageflgs (npm)

MAL-2025-192658

Malicious code in connections-api-hidden-runner (PyPI)

MAL-2025-192659

Malicious code in hidden-powershell-runner-ax7 (PyPI)