Supply Chain Incidents

MAL-2025-189316

Malicious code in sagitta-mira-ceres-darkenergy (npm)

MAL-2025-189630

Malicious code in spinner-uranology-terser-astrophysics (npm)

MAL-2025-187583

Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian (npm)

MAL-2025-189043

Malicious code in quick-decode-transpile-array-wind (npm)

MAL-2025-186110

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)

MAL-2025-189484

Malicious code in sigma-awk-abstract-error-kappa (npm)

MAL-2025-189178

Malicious code in remark-loglevel-process-nebula (npm)

MAL-2025-187961

Malicious code in mechatronics-deneb-bunyan-radiant (npm)

MAL-2025-186845

Malicious code in eslint-plugin-husky-pavo-virgo (npm)

MAL-2025-186481

Malicious code in darkenergy-janus-firebase-chalk (npm)

MAL-2025-186769

Malicious code in enum-report-char-rho-alpha (npm)

MAL-2025-186054

Malicious code in centauri-protractor-biosignature-supernova (npm)

MAL-2025-188020

Malicious code in meteor-deneb-phoebe-paleoanthropology (npm)

MAL-2025-188448

Malicious code in optimize-cache-static-orchestrate-import (npm)

MAL-2025-188398

Malicious code in odin-holography-wavefunction-webpack (npm)

MAL-2025-188705

Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)

MAL-2025-188149

Malicious code in multiverse-terser-webpack-plugin-vulcan-redgiant (npm)

MAL-2025-186354

Malicious code in cosmology-geodynamo-blaze-perturbation (npm)

MAL-2025-186520

Malicious code in deimos-redshift-plutology-google (npm)

MAL-2025-186489

Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda (npm)

MAL-2025-189534

Malicious code in slidev-deimos-heka-warp (npm)

MAL-2025-187178

Malicious code in global-centauri-jabbah-husky (npm)

MAL-2025-189906

Malicious code in tethys-primatology-selenium-yonder (npm)

MAL-2025-185877

Malicious code in boolean-double-benchmark-star-node (npm)