Supply Chain Incidents

MAL-2025-189478

Malicious code in short-easy-cat-mock-daemon (npm)

MAL-2025-186474

Malicious code in dagda-pulsar-redshift-remark (npm)

MAL-2025-189461

Malicious code in server-child-process-cosmicray-extremophile (npm)

MAL-2025-186736

Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm)

MAL-2025-188473

Malicious code in orchestrate-grid-dog-air-route (npm)

MAL-2025-188690

Malicious code in photon-transhumanism-cosmicray-neptune (npm)

MAL-2025-189988

Malicious code in transport-technocracy-geomorphology-bellatrix (npm)

MAL-2025-188808

Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin (npm)

MAL-2025-188589

Malicious code in pavo-helmet-titan-kinetic (npm)

MAL-2025-185669

Malicious code in authenticate-array-cluster-mock-import (npm)

MAL-2025-189197

Malicious code in resolvers-foundation-library-kastra (npm)

MAL-2025-189025

Malicious code in quark-postcss-soap-nova (npm)

MAL-2025-187438

Malicious code in import-proxy-cron-balance-abstract (npm)

MAL-2025-188657

Malicious code in phenomic-paleoclimatology-slidev-websockets (npm)

MAL-2025-185505

Malicious code in apollo-nodejs-helmet-loglevel (npm)

MAL-2025-189982

Malicious code in transport-babel-dagda-electron (npm)

MAL-2025-186249

Malicious code in commitlint-config-angular-graphql-ursa-yakutsk (npm)

MAL-2025-186050

Malicious code in centauri-luna-cli-tethys (npm)

MAL-2025-188272

Malicious code in nextjs-weywot-bioinformatics-selenium (npm)

MAL-2025-190295

Malicious code in websockets-hawkingradiation-redis-barnard (npm)

MAL-2025-188063

Malicious code in mira-wolf-prompts-got (npm)

MAL-2025-188040

Malicious code in middleware-fusion-gemini-rehype (npm)

MAL-2025-186245

Malicious code in commitlint-betelgeuse-yaml-indus (npm)

MAL-2025-186076

Malicious code in chai-gatsby-coronalmassejection-nuxtjs (npm)