Supply Chain Incidents

MAL-2025-190019

Malicious code in typeorm-protractor-cryovolcano-concurrently (npm)

MAL-2025-189714

Malicious code in subduction-xenobiology-websockets-polaris (npm)

MAL-2025-189994

Malicious code in tree-notify-report-decrypt-scale (npm)

MAL-2025-188784

Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)

MAL-2025-186620

Malicious code in dotenv-safe-electron-delphinus-dynamo (npm)

MAL-2025-187423

Malicious code in ignite-callback-cosmochemistry-paleobotany (npm)

MAL-2025-189114

Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)

MAL-2025-188309

Malicious code in node-config-phoenix-regulus-html-webpack-plugin (npm)

MAL-2025-185521

Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)

MAL-2025-190126

Malicious code in user-refactor-cluster-transpile-eta (npm)

MAL-2025-186894

Malicious code in exec-zephyr-xo-izar (npm)

MAL-2025-186864

Malicious code in europa-alphard-docusaurus-io (npm)

MAL-2025-187677

Malicious code in kernel-promise-proxy-xml-pipe (npm)

MAL-2025-190211

Malicious code in warn-bash-grep-array-test (npm)

MAL-2025-190203

Malicious code in vulcan-asthenosphere-babel-exoplanet (npm)

MAL-2025-187546

Malicious code in iota-simulate-optimize-tree-bundle (npm)

MAL-2025-186186

Malicious code in cluster-sirius-promise-neutrino (npm)

MAL-2025-187127

Malicious code in geckodriver-configstore-wasat-sirius (npm)

MAL-2025-186413

Malicious code in csrf-thermochronology-oscillation-janus (npm)

MAL-2025-189191

Malicious code in request-slidev-jest-repository (npm)

MAL-2025-186574

Malicious code in development-cypress-nebula-spectron (npm)

MAL-2025-186985

Malicious code in finally-stack-error-cold-assert (npm)

MAL-2025-187975

Malicious code in meissa-polaris-pulsar-stop (npm)

MAL-2025-188864

Malicious code in promise-umbra-css-loader-postcss-loader (npm)