Supply Chain Incidents

MAL-2025-188991

Malicious code in pyxis-sedna-nebula-sedna (npm)

MAL-2025-187821

Malicious code in lithosphere-changelog-grunt-uglify-js (npm)

MAL-2025-188916

Malicious code in proxima-nightmare-postgres-seismology (npm)

MAL-2025-187686

Malicious code in key-static-authorize-authenticate-quick (npm)

MAL-2025-188957

Malicious code in publish-sadr-event-readable (npm)

MAL-2025-190434

Malicious code in yildun-mesosphere-redis-spectron (npm)

MAL-2025-187986

Malicious code in mesosphere-chai-hermes-eris (npm)

MAL-2025-188088

Malicious code in mocha-eventhoriz-wavefunction-redshift (npm)

MAL-2025-186375

Malicious code in cron-rho-analyze-socket-air (npm)

MAL-2025-188665

Malicious code in phi-transpile-delta-table-unix (npm)

MAL-2025-187779

Malicious code in library-frontend-update-eclipse (npm)

MAL-2025-189438

Malicious code in semantic-release-aether-buffer-concurrently (npm)

MAL-2025-188481

Malicious code in orogeny-rollup-heka-miranda (npm)

MAL-2025-188412

Malicious code in omega-fast-xi-node-analyze (npm)

MAL-2025-188801

Malicious code in prettier-plugin-markdown-aquarius-colors-antares (npm)

MAL-2025-189989

Malicious code in transport-ursa-spinner-pulsar (npm)

MAL-2025-187653

Malicious code in kappa-awk-deploy-simulate-encrypt (npm)

MAL-2025-187658

Malicious code in kappa-lambda-bundle-omega-bad (npm)

MAL-2025-189400

Malicious code in sed-node-shell-long-authorize (npm)

MAL-2025-189757

Malicious code in superflare-tectonophysics-less-deimos (npm)

MAL-2025-189521

Malicious code in sirius-registry-webpack-quasar (npm)

MAL-2025-185788

Malicious code in betelgeuse-cassini-lyra-firebase (npm)

MAL-2025-188137

Malicious code in mui-cluster-antares-nucleosynthesis (npm)

MAL-2025-188931

Malicious code in psi-sudo-key-simulate-double (npm)