Supply Chain Incidents

MAL-2025-186005

Malicious code in carpo-aurora-pegasus-sqlite (npm)

MAL-2025-186178

Malicious code in cluster-concurrently-wolf-astrometry (npm)

MAL-2025-188948

Malicious code in publish-jest-sadr-prettier-plugin-markdown (npm)

MAL-2025-188036

Malicious code in middleware-antd-hapi-nightwatch (npm)

MAL-2025-187980

Malicious code in mensa-koa-castor-typeorm (npm)

MAL-2025-188936

Malicious code in public-eclipse-wavefunction-entanglement (npm)

MAL-2025-188489

Malicious code in outercore-sync-fornax-lightyear (npm)

MAL-2025-188136

Malicious code in mui-auth-betelgeuse-xo (npm)

MAL-2025-186936

Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

MAL-2025-187458

Malicious code in indus-farout-carpo-astrobiology (npm)

MAL-2025-186529

Malicious code in delphinus-run-script-deneb-query (npm)

MAL-2025-186910

Malicious code in exoplanetology-command-heka-mensa (npm)

MAL-2025-189274

Malicious code in rollup-plugin-octans-fomalhaut-dependencies (npm)

MAL-2025-186849

Malicious code in eslint-plugin-semantic-release-chalk-fusion (npm)

MAL-2025-189316

Malicious code in sagitta-mira-ceres-darkenergy (npm)

MAL-2025-188111

Malicious code in mongoose-cordelia-hawkingradiation-antares (npm)

MAL-2025-188083

Malicious code in miranda-postcss-blitz-module (npm)

MAL-2025-189621

Malicious code in speleology-pipe-pino-puppeteer (npm)

MAL-2025-187714

Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm)

MAL-2025-187122

Malicious code in gatsby-fornax-nuxtjs-vuetify (npm)

MAL-2025-188488

Malicious code in outercore-quasarjet-ora-saturnology (npm)

MAL-2025-190238

Malicious code in water-await-kappa-byte-minify (npm)

MAL-2025-187583

Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm)

MAL-2025-185834

Malicious code in biosignature-spawn-slidev-envconfig (npm)