Supply Chain Incidents

MAL-2025-188791

Malicious code in postgres-promise-transform-farout (npm)

MAL-2025-188272

Malicious code in nextjs-weywot-bioinformatics-selenium (npm)

MAL-2025-189125

Malicious code in registry-dione-halley-less (npm)

MAL-2025-189915

Malicious code in theta-daemon-moon-char-info (npm)

MAL-2025-189855

Malicious code in telesto-prettier-stylelint-cors-janus (npm)

MAL-2025-188924

Malicious code in proxy-decrypt-bad-byte-cat (npm)

MAL-2025-186431

Malicious code in csv-mensa-hadron-sagitta (npm)

MAL-2025-188710

Malicious code in pino-pretty-yildun-express-graphql (npm)

MAL-2025-185452

Malicious code in analyze-key-simple-long-gamma (npm)

MAL-2025-185586

Malicious code in astro-ignite-scripts-pulsar (npm)

MAL-2025-187403

Malicious code in hydra-publish-filament-prettier-plugin-markdown (npm)

MAL-2025-186240

Malicious code in commitizen-eclipse-sadr-chariklo (npm)

MAL-2025-189494

Malicious code in signal-authenticate-cluster-await-byte (npm)

MAL-2025-190242

Malicious code in water-execute-rain-root-cloud (npm)

MAL-2025-189722

Malicious code in subscription-interstellarmedium-toml-neuromorphic (npm)

MAL-2025-187083

Malicious code in gacrux-figures-postcss-fornax (npm)

MAL-2025-187153

Malicious code in geoarchaeology-hologram-xerxes-void (npm)

MAL-2025-189985

Malicious code in transport-postcss-loader-terser-betelgeuse (npm)

MAL-2025-185472

Malicious code in antares-planckscale-helmet-module (npm)

MAL-2025-186120

Malicious code in char-bundle-route-refactor-async (npm)

MAL-2025-189864

Malicious code in terser-antares-markdownlint-telesto (npm)

MAL-2025-189555

Malicious code in soap-membrane-thermosphere-eridanus (npm)

MAL-2025-189290

Malicious code in run-script-juno-supernova-commitlint (npm)

MAL-2025-190418

Malicious code in yakutsk-metalsmith-astrochemistry-terser (npm)