Supply Chain Incidents

MAL-2025-190050

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

MAL-2025-186620

Malicious code in dotenv-safe-electron-delphinus-dynamo (npm)

MAL-2025-190415

Malicious code in yakutsk-blueshift-supervisor-socketio (npm)

MAL-2025-190019

Malicious code in typeorm-protractor-cryovolcano-concurrently (npm)

MAL-2025-188422

Malicious code in omicron-short-water-easy-beta (npm)

MAL-2025-185644

Malicious code in augmentedreality-mesosphere-style-loader-registry (npm)

MAL-2025-189114

Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)

MAL-2025-188309

Malicious code in node-config-phoenix-regulus-html-webpack-plugin (npm)

MAL-2025-188058

Malicious code in mira-fusion-yildun-css-loader (npm)

MAL-2025-186894

Malicious code in exec-zephyr-xo-izar (npm)

MAL-2025-190329

Malicious code in winston-boson-publish-cluster (npm)

MAL-2025-188379

Malicious code in oauth-zenobia-mechatronics-sirius (npm)

MAL-2025-187677

Malicious code in kernel-promise-proxy-xml-pipe (npm)

MAL-2025-189714

Malicious code in subduction-xenobiology-websockets-polaris (npm)

MAL-2025-189979

Malicious code in transpile-new-cache-iota-quick (npm)

MAL-2025-187975

Malicious code in meissa-polaris-pulsar-stop (npm)

MAL-2025-185536

Malicious code in archaeometry-eventhoriz-taphonomy-node-sass (npm)

MAL-2025-187971

Malicious code in meissa-markdown-iota-vortex (npm)

MAL-2025-186574

Malicious code in development-cypress-nebula-spectron (npm)

MAL-2025-186442

Malicious code in cygnus-tool-update-xenos (npm)

MAL-2025-187364

Malicious code in holography-antares-enif-callback (npm)

MAL-2025-189421

Malicious code in sedna-telesto-webpack-public (npm)

MAL-2025-187546

Malicious code in iota-simulate-optimize-tree-bundle (npm)

MAL-2025-187804

Malicious code in lint-cassini-metalsmith-jupiter (npm)