Supply Chain Incidents

MAL-2025-190926

Malicious code in posthog-react-native (npm)

MAL-2025-190868

Malicious code in @mcp-use/inspector (npm)

MAL-2025-190878

Malicious code in @posthog/first-time-event-tracker (npm)

MAL-2025-190907

Malicious code in @postman/postman-collection-fork (npm)

MAL-2025-190904

Malicious code in @postman/pm-bin-macos-arm64 (npm)

MAL-2025-190899

Malicious code in @posthog/web-dev-server (npm)

MAL-2025-190875

Malicious code in @posthog/customerio-plugin (npm)

MAL-2025-190894

Malicious code in @posthog/taxonomy-plugin (npm)

MAL-2025-190905

Malicious code in @postman/pm-bin-macos-x64 (npm)

MAL-2025-190921

Malicious code in capacitor-voice-recorder-wav (npm)

MAL-2025-190914

Malicious code in @sauravthakur/corplib (npm)

MAL-2025-190916

Malicious code in @tezign/html-webpack-plugin (npm)

MAL-2025-190865

Malicious code in @darwinex/react-custom-scrollbars (npm)

MAL-2025-190863

Malicious code in @asyncapi/studio (npm)

MAL-2025-190864

Malicious code in ra-data-firebase (npm)

MAL-2025-190858

Malicious code in rollup-plugin-httpfile (npm)

MAL-2025-190802

Malicious code in @caretive/caret-cli (npm)

MAL-2025-190856

Malicious code in poper-react-sdk (npm)

MAL-2025-190857

Malicious code in react-native-worklet-functions (npm)

MAL-2025-190815

Malicious code in @ensdomains/web3modal (npm)

MAL-2025-190852

Malicious code in n8n-nodes-tmdb (npm)

MAL-2025-190854

Malicious code in orbit-boxicons (npm)

MAL-2025-190844

Malicious code in gate-evm-tools-test (npm)

MAL-2025-190817

Malicious code in @louisle2/cortex-js (npm)