Supply Chain Incidents

MAL-2025-190115

Malicious code in ursa-protoplanetarydisk-electron-prettier-plugin-markdown (npm)

MAL-2025-186981

Malicious code in final-secure-epsilon-catch-book (npm)

MAL-2025-189767

Malicious code in supernova-miranda-ophiuchus-resonance (npm)

MAL-2025-185754

Malicious code in baryon-ini-biomimicry-entanglement (npm)

MAL-2025-190097

Malicious code in upsilon-socket-cluster-static-eta (npm)

MAL-2025-190354

Malicious code in xanthus-cosmiconfig-nightwatch-eridanus (npm)

MAL-2025-186892

Malicious code in exec-supernova-soap-mongoose (npm)

MAL-2025-186569

Malicious code in despina-photon-nodejs-on (npm)

MAL-2025-189059

Malicious code in radiant-relay-castor-bulma (npm)

MAL-2025-186610

Malicious code in dorado-slidev-hyperion-avior (npm)

MAL-2025-188989

Malicious code in pyxis-enif-wasat-borealis (npm)

MAL-2025-187437

Malicious code in import-omega-long-cloud-gamma (npm)

MAL-2025-190042

Malicious code in umbriel-ariel-rigel-metalsmith (npm)

MAL-2025-186120

Malicious code in char-bundle-route-refactor-async (npm)

MAL-2025-187765

Malicious code in levels-convict-json-dynamo (npm)

MAL-2025-187265

Malicious code in halley-blueshift-sagitta-restart (npm)

MAL-2025-188084

Malicious code in miranda-spica-sails-superposition (npm)

MAL-2025-187227

Malicious code in grep-dog-function-stub-tree (npm)

MAL-2025-189271

Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)

MAL-2025-187351

Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune (npm)

MAL-2025-188029

Malicious code in meteor-octans-grunt-kuiperbelt (npm)

MAL-2025-188869

Malicious code in prompts-commitlint-canopus-karma (npm)

MAL-2025-189748

Malicious code in supercluster-filament-cosmicweb-spectron (npm)

MAL-2025-189139

Malicious code in regulus-taurus-reveal-md-exoplanet (npm)