Supply Chain Incidents

MAL-2025-187637

Malicious code in juno-pyxis-barnard-perturbation (npm)

MAL-2025-189997

Malicious code in triton-meissa-indus-phenomic (npm)

MAL-2025-190061

Malicious code in unuk-chalk-proxima-test (npm)

MAL-2025-188996

Malicious code in quantum-computing-frontend-halley-xml (npm)

MAL-2025-188363

Malicious code in npm-publish-cross-env-jest (npm)

MAL-2025-190296

Malicious code in websockets-kinetic-janus-sedna (npm)

MAL-2025-189817

Malicious code in tau-import-file-bad-byte (npm)

MAL-2025-187660

Malicious code in kappa-nu-daemon-async-bad (npm)

MAL-2025-186037

Malicious code in catch-byte-decompress-cluster-assert (npm)

MAL-2025-185862

Malicious code in blueshift-exoplanet-buffer-primatology (npm)

MAL-2025-188726

Malicious code in pipe-simple-virtualize-void-stack (npm)

MAL-2025-190444

Malicious code in zenith-algol-nodejs-pegasus (npm)

MAL-2025-187577

Malicious code in janus-petrology-sedimentology-polaris (npm)

MAL-2025-188719

Malicious code in pipe-got-filament-xenon (npm)

MAL-2025-187927

Malicious code in markdown-multiverse-vuepress-geoarchaeology (npm)

MAL-2025-187797

Malicious code in link-theta-float-class-balance (npm)

MAL-2025-186475

Malicious code in dagda-spawn-selenium-vega (npm)

MAL-2025-187334

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

MAL-2025-185483

Malicious code in antimatter-pino-celeste-dynamo (npm)

MAL-2025-187653

Malicious code in kappa-awk-deploy-simulate-encrypt (npm)

MAL-2025-187039

Malicious code in foundation-await-pavo-chariklo (npm)

MAL-2025-186204

Malicious code in colors-gravity-cosmiconfig-zephyr (npm)

MAL-2025-189415

Malicious code in sedna-nova-readable-levels (npm)

MAL-2025-186543

Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm)