Supply Chain Incidents

MAL-2025-190002

Malicious code in triton-subduction-darkenergy-boson (npm)

MAL-2025-186348

Malicious code in cosmochemistry-lynx-ceres-europa (npm)

MAL-2025-185976

Malicious code in callback-jekyll-public-nebula (npm)

MAL-2025-185989

Malicious code in callisto-hyperion-dactyl-equinox (npm)

MAL-2025-188568

Malicious code in parsec-build-nconf-miranda (npm)

MAL-2025-189774

Malicious code in superposition-nucleosynthesis-mui-rigel (npm)

MAL-2025-188455

Malicious code in optimize-pipe-signal-dog-index (npm)

MAL-2025-188803

Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology (npm)

MAL-2025-189293

Malicious code in run-script-taphonomy-interstellarmedium-antimatter (npm)

MAL-2025-188024

Malicious code in meteor-geochronology-element-ui-polaris (npm)

MAL-2025-185978

Malicious code in callback-parallax-slides-metabolomics (npm)

MAL-2025-187033

Malicious code in fornax-local-gemini-zenith (npm)

MAL-2025-187274

Malicious code in hapi-cross-env-subduction-mongodb (npm)

MAL-2025-188190

Malicious code in nconf-gemini-webdriver-mocha-forever (npm)

MAL-2025-185997

Malicious code in capella-cypress-stream-supernova (npm)

MAL-2025-189051

Malicious code in quito-process-oscillation-nanotechnology (npm)

MAL-2025-190049

Malicious code in umbriel-singularity-auth0-polaris (npm)

MAL-2025-187380

Malicious code in html-webpack-plugin-wavefunction-local-ora (npm)

MAL-2025-188269

Malicious code in nextjs-shelljs-centaurus-singularity (npm)

MAL-2025-187794

Malicious code in link-sadr-helios-pulsar (npm)

MAL-2025-188257

Malicious code in new-mu-sigma-float-visualize (npm)

MAL-2025-188932

Malicious code in public-atlas-europa-umbra (npm)

MAL-2025-188984

Malicious code in puppeteer-rocket-bioinformatics-elektra (npm)

MAL-2025-185404

Malicious code in airbnb-arcturus-enif-kastra (npm)