Supply Chain Incidents

MAL-2025-192404

Malicious code in callback-hook (npm)

MAL-2025-192409

Malicious code in ecmascript-runtime-client (npm)

MAL-2025-192405

Malicious code in confluent-kafka (npm)

MAL-2025-192417

Malicious code in rum-events-format (npm)

MAL-2025-192416

Malicious code in pymongo (npm)

MAL-2025-192411

Malicious code in fastavro (npm)

MAL-2025-192406

Malicious code in datadog-checks-dependency-provider (npm)

MAL-2025-192419

Malicious code in wasm-bindgen (npm)

MAL-2025-192407

Malicious code in datadog-checks-downloader (npm)

MAL-2025-192418

Malicious code in sfdc-abstract-legend (npm)

MAL-2025-192415

Malicious code in portal-lim (npm)

MAL-2025-192398

Malicious code in database-mongoose-kit (npm)

MAL-2025-192397

Malicious code in @onlytoodles/crypto-jsa (npm)

MAL-2025-192402

Malicious code in wartsila-text-csv (npm)

MAL-2025-192401

Malicious code in serval-integrations-common-frontend (npm)

MAL-2025-192400

Malicious code in node-calculator-0d96 (npm)

MAL-2025-192399

Malicious code in malicius-pdf (npm)

MAL-2025-192568

Malicious code in EffetMer.darkgpt (VSCode)

MAL-2025-192395

Malicious code in libxmlrussia (npm)

MAL-2025-192396

Malicious code in helloharry123c (PyPI)

MAL-2025-192394

Malicious code in libxmlussr2 (npm)

MAL-2025-192427

Malicious code in libxmlussr1 (npm)

MAL-2025-192393

Malicious code in ctosec-appsec-wb-xray-adapter (PyPI)

MAL-2025-192392

Malicious code in ajenti-plugin-testing-pyld (PyPI)