Supply Chain Incidents

MAL-2025-185789

Malicious code in betelgeuse-csrf-aldebaran-json (npm)

MAL-2025-185895

Malicious code in borealis-hercules-ora-lyra (npm)

MAL-2025-187749

Malicious code in less-bioinformatics-ganymede-virtualreality (npm)

MAL-2025-188777

Malicious code in postcss-html-webpack-plugin-enif-ultra (npm)

MAL-2025-188376

Malicious code in nuxtjs-steganography-dynamo-rocket (npm)

MAL-2025-185522

Malicious code in archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy (npm)

MAL-2025-188476

Malicious code in orogeny-algol-kastra-xo (npm)

MAL-2025-189376

Malicious code in schema-wasat-development-bellatrix (npm)

MAL-2025-187211

Malicious code in graviton-hapi-less-loader-electron (npm)

MAL-2025-187050

Malicious code in framework-writable-dotenv-parse-variables-yonder (npm)

MAL-2025-187593

Malicious code in java-simple-void-fork-sudo (npm)

MAL-2025-186770

Malicious code in enum-small-tau-sun-orchestrate (npm)

MAL-2025-188168

Malicious code in nanotechnology-nightwatch-elara-mira (npm)

MAL-2025-188776

Malicious code in postcss-gammarayburst-whitedwarf-archaeoastronomy (npm)

MAL-2025-189997

Malicious code in triton-meissa-indus-phenomic (npm)

MAL-2025-188139

Malicious code in mui-meissa-subscription-event (npm)

MAL-2025-186967

Malicious code in figures-materialize-markdown-pdf-miranda (npm)

MAL-2025-188363

Malicious code in npm-publish-cross-env-jest (npm)

MAL-2025-187632

Malicious code in juno-areology-dorado-webdriver-mocha (npm)

MAL-2025-188693

Malicious code in pi-authenticate-cold-encrypt-alert (npm)

MAL-2025-187961

Malicious code in mechatronics-deneb-bunyan-radiant (npm)

MAL-2025-189373

Malicious code in schema-bunyan-magnetar-bootstrap (npm)

MAL-2025-187797

Malicious code in link-theta-float-class-balance (npm)

MAL-2025-186364

Malicious code in cosmos-volcanology-cassini-nova (npm)