Supply Chain Incidents

MAL-2025-187137

Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin (npm)

MAL-2025-188065

Malicious code in miranda-borealis-nova-dotenv-safe (npm)

MAL-2025-186108

Malicious code in changelog-borealis-resolvers-resonance (npm)

MAL-2025-189191

Malicious code in request-slidev-jest-repository (npm)

MAL-2025-187093

Malicious code in gamma-old-visualize-web-view (npm)

MAL-2025-188262

Malicious code in nextjs-event-chromedriver-pm2 (npm)

MAL-2025-189949

Malicious code in toml-protractor-spinner-inflation (npm)

MAL-2025-186836

Malicious code in eslint-config-nebula-magnetosphere-vuetify (npm)

MAL-2025-185798

Malicious code in betelgeuse-sadr-antd-leda (npm)

MAL-2025-187378

Malicious code in html-webpack-plugin-vega-atlas-fetch (npm)

MAL-2025-188172

Malicious code in nashira-materialize-publish-galaxy (npm)

MAL-2025-186470

Malicious code in dagda-geckodriver-perturbation-geodynamo (npm)

MAL-2025-187857

Malicious code in long-final-minify-load-tree (npm)

MAL-2025-186082

Malicious code in chai-node-sass-biosignature-tardigrade (npm)

MAL-2025-185959

Malicious code in byte-root-test-kappa-sudo (npm)

MAL-2025-186140

Malicious code in chi-short-export-assert-execute (npm)

MAL-2025-186279

Malicious code in config-pipe-promise-start (npm)

MAL-2025-186677

Malicious code in eclipse-eridanus-upgrade-registry (npm)

MAL-2025-190461

Malicious code in zephyr-dotenv-technosignature-uranology (npm)

MAL-2025-185912

Malicious code in browserify-astrometry-stratigraphy-foundation (npm)

MAL-2025-189200

Malicious code in resolvers-kinetic-eventhoriz-webpack (npm)

MAL-2025-187280

Malicious code in hapi-zenobia-superagent-geodynamo (npm)

MAL-2025-189058

Malicious code in radiant-on-oscillation-indus (npm)

MAL-2025-185552

Malicious code in areology-atlas-dotenv-safe-greatfilter (npm)