Supply Chain Incidents

MAL-0000-phantomraven-jam3

Malicious npm package: jam3 (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-declaration-block-no-ignored-properties

Malicious npm package: declaration-block-no-ignored-properties (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-monorepo-cop

Malicious npm package: monorepo-cop (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-relay-optimizer-plugin

Malicious npm package: relay-optimizer-plugin (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-transform-function-bind

Malicious npm package: transform-function-bind (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-proposal-typescript

Malicious npm package: proposal-typescript (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-prefer-let

Malicious npm package: prefer-let (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-require-in-package

Malicious npm package: require-in-package (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-transform-new-target

Malicious npm package: transform-new-target (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-typescript-nhost

Malicious npm package: typescript-nhost (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-minify-replace

Malicious npm package: minify-replace (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-google-camelcase

Malicious npm package: google-camelcase (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-transform-json-strings

Malicious npm package: transform-json-strings (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-syntax-class-constructor-call

Malicious npm package: syntax-class-constructor-call (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-transform-es2015-parameters

Malicious npm package: transform-es2015-parameters (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-transform-undefined-to-void

Malicious npm package: transform-undefined-to-void (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-filenames-simple

Malicious npm package: filenames-simple (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-transform-proto-to-assign

Malicious npm package: transform-proto-to-assign (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-add-react-displayname

Malicious npm package: add-react-displayname (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-yoshi-base

Malicious npm package: yoshi-base (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-typescript-rtk-query

Malicious npm package: typescript-rtk-query (PhantomRaven campaign, Wave 2)

MAL-0000-phantomraven-import-zod

Malicious npm package: import-zod (PhantomRaven campaign, Wave 4)

MAL-0000-phantomraven-transform-es2015-duplicate-keys

Malicious npm package: transform-es2015-duplicate-keys (PhantomRaven campaign, Wave 3)

MAL-0000-phantomraven-syntax-function-bind

Malicious npm package: syntax-function-bind (PhantomRaven campaign, Wave 3)