Supply Chain Incidents

MAL-2025-190049

Malicious code in umbriel-singularity-auth0-polaris (npm)

MAL-2025-187036

Malicious code in fornax-postgres-phoenix-semantic-ui (npm)

MAL-2025-188026

Malicious code in meteor-jupiter-jupiter-xanthus (npm)

MAL-2025-188269

Malicious code in nextjs-shelljs-centaurus-singularity (npm)

MAL-2025-189994

Malicious code in tree-notify-report-decrypt-scale (npm)

MAL-2025-187794

Malicious code in link-sadr-helios-pulsar (npm)

MAL-2025-189335

Malicious code in sandbox-bash-authorize-hot-simulate (npm)

MAL-2025-189390

Malicious code in scripts-private-frontend-fornax (npm)

MAL-2025-188257

Malicious code in new-mu-sigma-float-visualize (npm)

MAL-2025-185932

Malicious code in bulma-equinox-build-nova (npm)

MAL-2025-190182

Malicious code in void-oberon-supernova-package (npm)

MAL-2025-186503

Malicious code in decoherence-neptune-saturnology-transport (npm)

MAL-2025-188012

Malicious code in meteor-betelgeuse-eigenstate-cladistics (npm)

MAL-2025-189746

Malicious code in supercluster-command-betelgeuse-style-loader (npm)

MAL-2025-187655

Malicious code in kappa-debug-lambda-daemon-upsilon (npm)

MAL-2025-186662

Malicious code in dysonswarm-loop-command-uranology (npm)

MAL-2025-189169

Malicious code in remark-barnard-commitlint-loop (npm)

MAL-2025-190002

Malicious code in triton-subduction-darkenergy-boson (npm)

MAL-2025-189334

Malicious code in sails-winston-radioastronomy-charon (npm)

MAL-2025-188718

Malicious code in pipe-final-tree-emulate-byte (npm)

MAL-2025-186106

Malicious code in chalk-supercluster-repository-morgan (npm)

MAL-2025-186111

Malicious code in changelog-hugo-fusion-tectonic (npm)

MAL-2025-189301

Malicious code in sadr-corvus-janus-eclipse (npm)

MAL-2025-186574

Malicious code in development-cypress-nebula-spectron (npm)