Supply Chain Incidents

MAL-2025-186210

Malicious code in colors-superflare-rigel-quark (npm)

MAL-2025-189269

Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)

MAL-2025-188133

Malicious code in mu-mu-psi-zero-java (npm)

MAL-2025-188699

Malicious code in pino-avior-nightwatch-betelgeuse (npm)

MAL-2025-189402

Malicious code in sed-route-encrypt-refactor-public (npm)

MAL-2025-187223

Malicious code in greatfilter-process-mutation-crust (npm)

MAL-2025-187240

Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)

MAL-2025-188682

Malicious code in phoenix-cache-dione-package (npm)

MAL-2025-186574

Malicious code in development-cypress-nebula-spectron (npm)

MAL-2025-187007

Malicious code in fomalhaut-restart-loglevel-forever (npm)

MAL-2025-187141

Malicious code in gemini-joviology-sedimentology-buffer (npm)

MAL-2025-185583

Malicious code in asthenosphere-package-eridanus-restart (npm)

MAL-2025-186689

Malicious code in eigenstate-outercore-procyon-colors (npm)

MAL-2025-187091

Malicious code in gamma-good-socket-enum-route (npm)

MAL-2025-188863

Malicious code in promise-selenium-bellatrix-mysql (npm)

MAL-2025-186462

Malicious code in dactyl-transform-nightwatch-petrology (npm)

MAL-2025-187757

Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

MAL-2025-187305

Malicious code in heka-markdownlint-rollup-node-config (npm)

MAL-2025-188958

Malicious code in publish-superagent-rollup-plugin-commitlint (npm)

MAL-2025-185854

Malicious code in blaze-transport-eridanus-singularitarianism (npm)

MAL-2025-186083

Malicious code in chai-prompts-auth0-geckodriver (npm)

MAL-2025-186318

Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

MAL-2025-185810

Malicious code in biogeochemistry-test-express-css-minimizer-webpack-plugin (npm)

MAL-2025-189614

Malicious code in spectron-webdriver-async-primatology-canopus (npm)