Supply Chain Incidents

MAL-2025-185908

Malicious code in brane-mocha-elektra-farout (npm)

MAL-2025-187301

Malicious code in heka-bootstrap-javascript-loopback (npm)

MAL-2025-185562

Malicious code in ariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm)

MAL-2025-189045

Malicious code in quick-orchestrate-resolve-cat-tau (npm)

MAL-2025-185394

Malicious code in aether-pulsar-polaris-aldebaran (npm)

MAL-2025-187169

Malicious code in geomorphology-fermion-aquarius-oscillation (npm)

MAL-2025-186435

Malicious code in cybernetics-concurrently-testcafe-foundation (npm)

MAL-2025-190416

Malicious code in yakutsk-electron-nebula-jekyll (npm)

MAL-2025-188457

Malicious code in optimize-report-pi-module-hash (npm)

MAL-2025-185666

Malicious code in auth0-scripts-slides-build (npm)

MAL-2025-186528

Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin (npm)

MAL-2025-186234

Malicious code in command-prettier-stylelint-server-schema (npm)

MAL-2025-187402

Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

MAL-2025-188479

Malicious code in orogeny-karma-babel-sequelize (npm)

MAL-2025-185793

Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm)

MAL-2025-190281

Malicious code in webdriverio-npm-supervisor-blaze (npm)

MAL-2025-190046

Malicious code in umbriel-kastra-gacrux-google (npm)

MAL-2025-188236

Malicious code in neptunology-husky-dotenv-parse-variables-got (npm)

MAL-2025-190444

Malicious code in zenith-algol-nodejs-pegasus (npm)

MAL-2025-185682

Malicious code in avior-atlas-draco-websockets (npm)

MAL-2025-190212

Malicious code in warn-class-proxy-cron-earth (npm)

MAL-2025-187845

Malicious code in log-delta-daemon-finally-minify (npm)

MAL-2025-188619

Malicious code in perseus-cache-neptune-jupiter (npm)

MAL-2025-188870

Malicious code in prompts-flare-celeste-sedna (npm)