Supply Chain Incidents

MAL-2025-186313

Malicious code in coronalmassejection-holography-dorado-command (npm)

MAL-2025-187312

Malicious code in heliophysics-blackhole-ganymede-cluster (npm)

MAL-2025-187816

Malicious code in lint-staged-reveal-md-electron-convict (npm)

MAL-2025-188615

Malicious code in permission-resolve-function-fast-try (npm)

MAL-2025-189903

Malicious code in tethys-acamar-protractor-html-webpack-plugin (npm)

MAL-2025-189705

Malicious code in stub-scale-alpha-epsilon-optimize (npm)

MAL-2025-189236

Malicious code in rigel-levels-taurus-sagitta (npm)

MAL-2025-190324

Malicious code in wind-phi-pi-zeta-virtualize (npm)

MAL-2025-189708

Malicious code in subduction-cosmology-hercules-cosmicweb (npm)

MAL-2025-190094

Malicious code in upsilon-parse-module-virtualize-sandbox (npm)

MAL-2025-188672

Malicious code in phoebe-holography-deimos-json (npm)

MAL-2025-187766

Malicious code in levels-eris-ora-hydra (npm)

MAL-2025-185768

Malicious code in bellatrix-local-puppeteer-epigenetics (npm)

MAL-2025-190404

Malicious code in xo-halley-less-loader-cache (npm)

MAL-2025-186927

Malicious code in express-cors-dysonswarm-async (npm)

MAL-2025-187928

Malicious code in markdown-nconf-string-xerxes (npm)

MAL-2025-188530

Malicious code in paleomagnetism-process-rigel-ariel (npm)

MAL-2025-189015

Malicious code in quark-aquarius-weywot-prettier-stylelint (npm)

MAL-2025-187737

Malicious code in leda-morgan-xanthus-ophiuchus (npm)

MAL-2025-189706

Malicious code in style-loader-lint-commitlint-config-angular-bootstrap (npm)

MAL-2025-188682

Malicious code in phoenix-cache-dione-package (npm)

MAL-2025-186424

Malicious code in css-minimizer-webpack-plugin-superagent-npm-private (npm)

MAL-2025-190052

Malicious code in umbriel-zenobia-sedna-odin (npm)

MAL-2025-187240

Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)