Supply Chain Incidents

MAL-2025-187114

Malicious code in ganymede-tethys-jwt-halley (npm)

MAL-2025-186250

Malicious code in commitlint-config-angular-hercules-express-yonder (npm)

MAL-2025-186432

Malicious code in csv-mongodb-rehype-less-loader (npm)

MAL-2025-185929

Malicious code in build-hapi-registry-quark (npm)

MAL-2025-187815

Malicious code in lint-staged-lint-staged-auth-terser-webpack-plugin (npm)

MAL-2025-188038

Malicious code in middleware-css-loader-eigenstate-pavo (npm)

MAL-2025-188184

Malicious code in native-rate-limiter-uninstall-regulus (npm)

MAL-2025-189333

Malicious code in sails-soap-link-webdriver-mocha (npm)

MAL-2025-190335

Malicious code in winston-leda-mesosphere-umbra (npm)

MAL-2025-189037

Malicious code in quasarjet-prettier-plugin-markdown-supervisor-astrometry (npm)

MAL-2025-187745

Malicious code in lepton-weywot-mira-pino-pretty (npm)

MAL-2025-188699

Malicious code in pino-avior-nightwatch-betelgeuse (npm)

MAL-2025-186467

Malicious code in dagda-ablation-ganymede-meteor (npm)

MAL-2025-186218

Malicious code in comet-oauth-airbnb-tethys (npm)

MAL-2025-185828

Malicious code in biosignature-enif-element-ui-biohacking (npm)

MAL-2025-190482

Malicious code in zeta-transpile-encode-pi-table (npm)

MAL-2025-188173

Malicious code in nashira-winston-aurora-gatsby (npm)

MAL-2025-189795

Malicious code in table-report-book-quick-delta (npm)

MAL-2025-186966

Malicious code in figures-mantle-docusaurus-promise (npm)

MAL-2025-188265

Malicious code in nextjs-octans-interferometry-fusion (npm)

MAL-2025-188448

Malicious code in optimize-cache-static-orchestrate-import (npm)

MAL-2025-185606

Malicious code in astrometry-request-semantic-ui-hermes (npm)

MAL-2025-186704

Malicious code in electron-postcss-loader-yaml-pyxis (npm)

MAL-2025-189211

Malicious code in rest-lightyear-mensa-quasarjet (npm)