Supply Chain Incidents

MAL-2025-186467

Malicious code in dagda-ablation-ganymede-meteor (npm)

MAL-2025-189404

Malicious code in sed-sed-link-data-root (npm)

MAL-2025-190419

Malicious code in yakutsk-saturnology-grus-prosthetics (npm)

MAL-2025-189214

Malicious code in rest-oortcloud-interstellarmedium-yaml (npm)

MAL-2025-188184

Malicious code in native-rate-limiter-uninstall-regulus (npm)

MAL-2025-190212

Malicious code in warn-class-proxy-cron-earth (npm)

MAL-2025-188265

Malicious code in nextjs-octans-interferometry-fusion (npm)

MAL-2025-190475

Malicious code in zero-finally-new-easy-phi (npm)

MAL-2025-186966

Malicious code in figures-mantle-docusaurus-promise (npm)

MAL-2025-186432

Malicious code in csv-mongodb-rehype-less-loader (npm)

MAL-2025-189049

Malicious code in quito-cryovolcano-nightwatch-subscription (npm)

MAL-2025-189369

Malicious code in scale-deserialize-function-optimize-hot (npm)

MAL-2025-185471

Malicious code in antares-parallax-publish-innercore (npm)

MAL-2025-186704

Malicious code in electron-postcss-loader-yaml-pyxis (npm)

MAL-2025-187745

Malicious code in lepton-weywot-mira-pino-pretty (npm)

MAL-2025-188158

Malicious code in mysql-cassini-unuk-middleware (npm)

MAL-2025-186965

Malicious code in figures-elara-lithosphere-cosmicsilence (npm)

MAL-2025-187330

Malicious code in helmet-supercluster-release-it-technosignature (npm)

MAL-2025-188015

Malicious code in meteor-cache-fomalhaut-winston (npm)

MAL-2025-188371

Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)

MAL-2025-186635

Malicious code in double-rain-protected-import-monitor (npm)

MAL-2025-187140

Malicious code in gemini-ionosphere-superposition-package (npm)

MAL-2025-188344

Malicious code in norma-tool-stratigraphy-stop (npm)

MAL-2025-185928

Malicious code in build-geoarchaeology-mutation-library (npm)