Supply Chain Incidents

MAL-2025-186974

Malicious code in filament-xanthus-bellatrix-phoenix (npm)

MAL-2025-189468

Malicious code in shell-class-encrypt-info-zeta (npm)

MAL-2025-186192

Malicious code in cluster-wind-fork-view-monitor (npm)

MAL-2025-187348

Malicious code in hermes-version-mdx-yaml (npm)

MAL-2025-190121

Malicious code in user-benchmark-omega-benchmark-socket (npm)

MAL-2025-186849

Malicious code in eslint-plugin-semantic-release-chalk-fusion (npm)

MAL-2025-190051

Malicious code in umbriel-transform-corvus-request (npm)

MAL-2025-185637

Malicious code in atlas-miranda-jabbah-oberon (npm)

MAL-2025-188892

Malicious code in proteomics-zenobia-cosmology-quark (npm)

MAL-2025-186005

Malicious code in carpo-aurora-pegasus-sqlite (npm)

MAL-2025-187714

Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm)

MAL-2025-190269

Malicious code in webdriver-mocha-browserify-polaris-cache (npm)

MAL-2025-189313

Malicious code in sagitta-izar-dagda-nightmare (npm)

MAL-2025-187757

Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

MAL-2025-186228

Malicious code in command-blazar-node-config-phylogenetics (npm)

MAL-2025-190474

Malicious code in zero-epsilon-bash-cache-query (npm)

MAL-2025-188934

Malicious code in public-bundle-class-iota-thread (npm)

MAL-2025-190409

Malicious code in xo-morgan-css-loader-prompts (npm)

MAL-2025-190484

Malicious code in zooarchaeology-configstore-google-darkenergy (npm)

MAL-2025-189621

Malicious code in speleology-pipe-pino-puppeteer (npm)

MAL-2025-186178

Malicious code in cluster-concurrently-wolf-astrometry (npm)

MAL-2025-186381

Malicious code in cross-env-dorado-eslint-config-zephyr (npm)

MAL-2025-188948

Malicious code in publish-jest-sadr-prettier-plugin-markdown (npm)

MAL-2025-190296

Malicious code in websockets-kinetic-janus-sedna (npm)