Supply Chain Incidents

MAL-2025-186193

Malicious code in code-code-old-reject-cat (npm)

MAL-2025-186750

Malicious code in enif-europa-lint-staged-equinox (npm)

MAL-2025-188005

Malicious code in metalsmith-antares-barnard-yildun (npm)

MAL-2025-188215

Malicious code in neptune-dactyl-pulsar-paleoanthropology (npm)

MAL-2025-188581

Malicious code in passport-selenium-terser-webpack-plugin-juno (npm)

MAL-2025-186049

Malicious code in centauri-lint-staged-helios-sequelize (npm)

MAL-2025-187654

Malicious code in kappa-cache-process-byte-sudo (npm)

MAL-2025-190410

Malicious code in xo-nightmare-magellan-eslint-plugin (npm)

MAL-2025-188482

Malicious code in oscillation-aquarius-ursa-parallax (npm)

MAL-2025-189145

Malicious code in rehype-sequelize-avior-redis (npm)

MAL-2025-190133

Malicious code in vega-joviology-vega-bellatrix (npm)

MAL-2025-185783

Malicious code in beta-moon-fast-authorize-deploy (npm)

MAL-2025-186664

Malicious code in earth-omega-epsilon-error-compress (npm)

MAL-2025-188412

Malicious code in omega-fast-xi-node-analyze (npm)

MAL-2025-189667

Malicious code in steganography-yaml-quark-geochronology (npm)

MAL-2025-188107

Malicious code in mongodb-cz-conventional-changelog-rollup-plugin-biosignature (npm)

MAL-2025-188668

Malicious code in phoebe-borealis-vuepress-coronalmassejection (npm)

MAL-2025-187716

Malicious code in lacerta-betelgeuse-xanthus-upgrade (npm)

MAL-2025-189532

Malicious code in slides-quark-thermochronology-meteor (npm)

MAL-2025-190446

Malicious code in zenith-cosmiconfig-miranda-standard (npm)

MAL-2025-189554

Malicious code in soap-commitizen-markdown-janus (npm)

MAL-2025-188839

Malicious code in procyon-andromeda-configstore-javascript (npm)

MAL-2025-185696

Malicious code in await-lacerta-ganymede-commitizen (npm)

MAL-2025-190020

Malicious code in typeorm-warp-procyon-non-blocking (npm)