Supply Chain Incidents

MAL-2025-187357

Malicious code in hexo-steganography-cli-standard (npm)

MAL-2025-188352

Malicious code in nova-chakra-ui-css-loader-eris (npm)

MAL-2025-188587

Malicious code in pavo-colors-taurus-eslint-plugin (npm)

MAL-2025-189736

Malicious code in sun-thread-monitor-void-sun (npm)

MAL-2025-187226

Malicious code in grep-cron-thread-grep-short (npm)

MAL-2025-188903

Malicious code in protractor-wezen-repository-quantum (npm)

MAL-2025-185431

Malicious code in alpha-authenticate-serialize-long-try (npm)

MAL-2025-186075

Malicious code in chai-blazar-quasar-link (npm)

MAL-2025-185659

Malicious code in australis-prosthetics-cygnus-xerxes (npm)

MAL-2025-188553

Malicious code in parallax-chakra-ui-mantle-inquirer (npm)

MAL-2025-186167

Malicious code in cli-mdx-galaxy-xenobiology (npm)

MAL-2025-189177

Malicious code in remark-io-sass-loader-changelog (npm)

MAL-2025-186762

Malicious code in entanglement-tachyon-puppeteer-cressida (npm)

MAL-2025-189959

Malicious code in tool-wavefunction-ultra-gridsome (npm)

MAL-2025-185372

Malicious code in acamar-halley-eclipse-kronos (npm)

MAL-2025-187020

Malicious code in fork-object-protected-data-fork (npm)

MAL-2025-187676

Malicious code in kernel-encode-benchmark-interface-virtualize (npm)

MAL-2025-186875

Malicious code in event-bootes-dotenv-parse-variables-ursa (npm)

MAL-2025-188218

Malicious code in neptune-ganymede-thermochronology-got (npm)

MAL-2025-189087

Malicious code in rate-limiter-technosignature-genomics-cypress (npm)

MAL-2025-188613

Malicious code in permission-index-zero-visualize-private (npm)

MAL-2025-189545

Malicious code in small-analyze-theta-signal-daemon (npm)

MAL-2025-185456

Malicious code in andromeda-impulse-quasarjet-elara (npm)

MAL-2025-185497

Malicious code in apollo-areology-tardigrade-tailwindcss (npm)