Incident: Unauthorized Access to Zapier NPM Packages

Please review the enclosed list of packages and recommendations for Zapier developers.

Released: 2025-11-24

Unauthorized Access to Zapier npm Packages

Note: No action is needed from Zapier users, only from Zapier developers using one of the NPM package versions listed on this page. See that link for detailed mitigation recommendations.

All Zapier products are operating as expected and there is no indication of data loss or leak.

Please see this link for the most up-to-date information.