Supply Chain Incidents

MAL-2025-186601

Malicious code in dog-book-protected-scale-grid (npm)

MAL-2025-189055

Malicious code in radiant-express-sync-tachyon (npm)

MAL-2025-186408

Malicious code in csrf-carina-technocracy-areology (npm)

MAL-2025-188280

Malicious code in nightwatch-abiogenesis-semantic-release-supercluster (npm)

MAL-2025-188835

Malicious code in process-loopback-cosmos-leda (npm)

MAL-2025-189741

Malicious code in superagent-planckscale-prettier-transform (npm)

MAL-2025-185597

Malicious code in astrochemistry-rigel-csrf-cosmicweb (npm)

MAL-2025-187487

Malicious code in inquirer-flare-sass-loader-tectonic (npm)

MAL-2025-186925

Malicious code in export-zero-orchestrate-zero-compile (npm)

MAL-2025-186430

Malicious code in csv-helmet-dione-canopus (npm)

MAL-2025-186087

Malicious code in chakra-ui-fomalhaut-on-cosmochemistry (npm)

MAL-2025-185602

Malicious code in astrometry-halley-auriga-cressida (npm)

MAL-2025-190292

Malicious code in webpack-query-thermochronology-antimatter (npm)

MAL-2025-190110

Malicious code in ursa-lynx-baryon-ophiuchus (npm)

MAL-2025-187840

Malicious code in local-lyra-cli-rimraf (npm)

MAL-2025-187838

Malicious code in local-jasmine-gammarayburst-delphinus (npm)

MAL-2025-188119

Malicious code in moon-new-cloud-mu-cat (npm)

MAL-2025-185445

Malicious code in alphard-webdriverio-titan-elektra (npm)

MAL-2025-186117

Malicious code in changelog-tachyon-writable-pipe (npm)

MAL-2025-188010

Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)

MAL-2025-190271

Malicious code in webdriver-mocha-electron-cache-dione (npm)

MAL-2025-189392

Malicious code in scripts-thermochronology-corvus-stop (npm)

MAL-2025-185781

Malicious code in beta-grep-cron-omega-validate (npm)

MAL-2025-186133

Malicious code in chi-bad-deserialize-throw-static (npm)