Supply Chain Incidents

MAL-2025-190307

Malicious code in weywot-webdriver-mocha-loglevel-fornax (npm)

MAL-2025-186430

Malicious code in csv-helmet-dione-canopus (npm)

MAL-2025-189377

Malicious code in scorpius-chalk-eleventy-kaus (npm)

MAL-2025-187858

Malicious code in long-module-report-abstract-alpha (npm)

MAL-2025-189561

Malicious code in soap-winston-thuban-pyxis (npm)

MAL-2025-186788

Malicious code in epsilon-beta-key-double-assert (npm)

MAL-2025-190292

Malicious code in webpack-query-thermochronology-antimatter (npm)

MAL-2025-190110

Malicious code in ursa-lynx-baryon-ophiuchus (npm)

MAL-2025-185875

Malicious code in book-web-deploy-object-byte (npm)

MAL-2025-187273

Malicious code in halley-xanthus-aquarius-fornax (npm)

MAL-2025-187506

Malicious code in integer-tau-chi-alert-gamma (npm)

MAL-2025-188928

Malicious code in proxy-process-rho-chi-web (npm)

MAL-2025-187487

Malicious code in inquirer-flare-sass-loader-tectonic (npm)

MAL-2025-188753

Malicious code in plutology-meteor-xerxes-readable (npm)

MAL-2025-185479

Malicious code in antd-playwright-ichnology-technocracy (npm)

MAL-2025-186140

Malicious code in chi-short-export-assert-execute (npm)

MAL-2025-186479

Malicious code in darkenergy-google-paleoanthropology-thuban (npm)

MAL-2025-188569

Malicious code in parsec-kaus-optimize-css-assets-webpack-plugin-triton (npm)

MAL-2025-186270

Malicious code in concurrently-janus-spinner-palynology (npm)

MAL-2025-186087

Malicious code in chakra-ui-fomalhaut-on-cosmochemistry (npm)

MAL-2025-190184

Malicious code in volcanology-yakutsk-phenomic-xo (npm)

MAL-2025-186784

Malicious code in epimetheus-release-it-fetch-centaurus (npm)

MAL-2025-188843

Malicious code in procyon-futurology-concurrently-sqlite (npm)

MAL-2025-187358

Malicious code in higgs-biosignature-inflation-upgrade (npm)