Supply Chain Incidents

MAL-2025-186815

Malicious code in eris-framework-lacerta-biomimicry (npm)

MAL-2025-188399

Malicious code in odin-lepton-superagent-uninstall (npm)

MAL-2025-185775

Malicious code in bellatrix-quantum-inquirer-child-process (npm)

MAL-2025-186496

Malicious code in debug-container-zeta-load-log (npm)

MAL-2025-187646

Malicious code in jwt-jwt-nodejs-publish (npm)

MAL-2025-188450

Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda (npm)

MAL-2025-185458

Malicious code in antares-aether-run-script-pino-pretty (npm)

MAL-2025-188972

Malicious code in pulsar-mocha-saturnology-jupiter (npm)

MAL-2025-186171

Malicious code in cloud-analyze-spy-thread-object (npm)

MAL-2025-187870

Malicious code in loopback-remark-cordelia-commitlint (npm)

MAL-2025-189676

Malicious code in stratigraphy-helios-janus-electron-builder (npm)

MAL-2025-190358

Malicious code in xanthus-redis-scripts-fomalhaut (npm)

MAL-2025-189164

Malicious code in release-it-juno-cypress-ganymede (npm)

MAL-2025-185985

Malicious code in callisto-cors-ini-puppeteer (npm)

MAL-2025-185620

Malicious code in async-gridsome-xanadu-webdriver-mocha (npm)

MAL-2025-186591

Malicious code in docusaurus-buffer-sequelize-cassini (npm)

MAL-2025-188061

Malicious code in mira-pino-impulse-adonis (npm)

MAL-2025-185553

Malicious code in areology-darkmatter-ablation-thermochronology (npm)

MAL-2025-186874

Malicious code in event-biogeochemistry-blitz-eris (npm)

MAL-2025-188607

Malicious code in pegasus-shelljs-public-seismology (npm)

MAL-2025-185857

Malicious code in blitz-ganymede-aether-gridsome (npm)

MAL-2025-185759

Malicious code in bash-serialize-decode-grid-sudo (npm)

MAL-2025-190386

Malicious code in xerxes-non-blocking-baryon-solarnebula (npm)

MAL-2025-187580

Malicious code in janus-regulus-eclipse-castor (npm)