Supply Chain Incidents

MAL-2025-187019

Malicious code in fork-lightyear-commitlint-unuk (npm)

MAL-2025-190097

Malicious code in upsilon-socket-cluster-static-eta (npm)

MAL-2025-189748

Malicious code in supercluster-filament-cosmicweb-spectron (npm)

MAL-2025-187631

Malicious code in jsonp-lacerta-eris-octans (npm)

MAL-2025-189059

Malicious code in radiant-relay-castor-bulma (npm)

MAL-2025-188710

Malicious code in pino-pretty-yildun-express-graphql (npm)

MAL-2025-186240

Malicious code in commitizen-eclipse-sadr-chariklo (npm)

MAL-2025-189965

Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm)

MAL-2025-186569

Malicious code in despina-photon-nodejs-on (npm)

MAL-2025-189010

Malicious code in quantumfoam-dysonswarm-io-aquarius (npm)

MAL-2025-188260

Malicious code in new-transpile-alpha-log-proxy (npm)

MAL-2025-185869

Malicious code in book-boolean-runtime-grep-root (npm)

MAL-2025-187765

Malicious code in levels-convict-json-dynamo (npm)

MAL-2025-186385

Malicious code in cross-env-package-rimraf-antares (npm)

MAL-2025-189139

Malicious code in regulus-taurus-reveal-md-exoplanet (npm)

MAL-2025-188029

Malicious code in meteor-octans-grunt-kuiperbelt (npm)

MAL-2025-189864

Malicious code in terser-antares-markdownlint-telesto (npm)

MAL-2025-185821

Malicious code in bioinformatics-pino-pretty-mutation-vuepress (npm)

MAL-2025-188989

Malicious code in pyxis-enif-wasat-borealis (npm)

MAL-2025-189896

Malicious code in testcafe-jsonp-lyra-antd (npm)

MAL-2025-186677

Malicious code in eclipse-eridanus-upgrade-registry (npm)

MAL-2025-188860

Malicious code in promise-interpret-cache-final-process (npm)

MAL-2025-189491

Malicious code in sigma-try-deserialize-slow-omega (npm)

MAL-2025-190146

Malicious code in version-virtualreality-scorpius-wezen (npm)