Supply Chain Incidents

MAL-2025-186615

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

MAL-2025-186299

Malicious code in convict-spawn-gravitationalwave-stream (npm)

MAL-2025-185417

Malicious code in aldebaran-markdownlint-phoebe-cordelia (npm)

MAL-2025-190342

Malicious code in winston-writable-betelgeuse-jekyll (npm)

MAL-2025-188645

Malicious code in perturbation-thuban-neuromorphic-dynamo (npm)

MAL-2025-189444

Malicious code in sequelize-hawkingradiation-protractor-quasarjet (npm)

MAL-2025-187783

Malicious code in library-update-commitizen-jabbah (npm)

MAL-2025-187422

Malicious code in ichnology-ursa-petrology-cluster (npm)

MAL-2025-186225

Malicious code in comet-rehype-transport-entanglement (npm)

MAL-2025-186006

Malicious code in carpo-hermes-firebase-nightmare (npm)

MAL-2025-186878

Malicious code in eventhoriz-ariel-atlas-lacerta (npm)

MAL-2025-185976

Malicious code in callback-jekyll-public-nebula (npm)

MAL-2025-188878

Malicious code in prosthetics-janus-cosmicray-spectron (npm)

MAL-2025-186625

Malicious code in dotenv-safe-pino-pretty-terser-postcss (npm)

MAL-2025-189994

Malicious code in tree-notify-report-decrypt-scale (npm)

MAL-2025-186097

Malicious code in chalk-mira-procyon-schema (npm)

MAL-2025-189579

Malicious code in socketio-polaris-restart-adonis (npm)

MAL-2025-188492

Malicious code in package-nconf-antares-quasar (npm)

MAL-2025-189421

Malicious code in sedna-telesto-webpack-public (npm)

MAL-2025-189941

Malicious code in titan-luna-luna-prompts (npm)

MAL-2025-187485

Malicious code in innercore-superposition-lint-staged-adonis (npm)

MAL-2025-187216

Malicious code in gravity-juno-cors-sirius (npm)

MAL-2025-188813

Malicious code in prettier-stylelint-zenobia-loop-paleomagnetism (npm)

MAL-2025-189070

Malicious code in radiometric-native-adonis-cygnus (npm)