Supply Chain Incidents

MAL-2025-186615

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

MAL-2025-185358

Malicious code in abiogenesis-start-petrology-webdriverio (npm)

MAL-2025-190234

Malicious code in wasat-photon-await-mocha (npm)

MAL-2025-188652

Malicious code in phenomic-google-antares-quark (npm)

MAL-2025-188616

Malicious code in perseus-ablation-elara-cryptography (npm)

MAL-2025-187885

Malicious code in lynx-nashira-heliophysics-solis (npm)

MAL-2025-189412

Malicious code in sedna-jest-init-delphinus (npm)

MAL-2025-189939

Malicious code in titan-iota-carina-vuepress (npm)

MAL-2025-188410

Malicious code in old-stub-xml-deploy-wind (npm)

MAL-2025-190192

Malicious code in vuepress-parallax-socketio-juno (npm)

MAL-2025-187500

Malicious code in integer-lambda-notify-cache-try (npm)

MAL-2025-187853

Malicious code in loglevel-testcafe-spectron-leda (npm)

MAL-2025-187245

Malicious code in grus-pipe-websockets-grunt (npm)

MAL-2025-190303

Malicious code in weywot-prompts-nestjs-nuxtjs (npm)

MAL-2025-187217

Malicious code in gravity-start-triton-oauth (npm)

MAL-2025-189912

Malicious code in thermochronology-plutology-magnetar-nightwatch (npm)

MAL-2025-188581

Malicious code in passport-selenium-terser-webpack-plugin-juno (npm)

MAL-2025-185976

Malicious code in callback-jekyll-public-nebula (npm)

MAL-2025-187654

Malicious code in kappa-cache-process-byte-sudo (npm)

MAL-2025-190410

Malicious code in xo-nightmare-magellan-eslint-plugin (npm)

MAL-2025-185790

Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet (npm)

MAL-2025-188482

Malicious code in oscillation-aquarius-ursa-parallax (npm)

MAL-2025-188668

Malicious code in phoebe-borealis-vuepress-coronalmassejection (npm)

MAL-2025-189921

Malicious code in thread-monitor-async-omicron-optimize (npm)