Supply Chain Incidents

MAL-2025-186219

Malicious code in comet-orbit-umbriel-thermochronology (npm)

MAL-2025-187050

Malicious code in framework-writable-dotenv-parse-variables-yonder (npm)

MAL-2025-189940

Malicious code in titan-link-wolf-unuk (npm)

MAL-2025-189462

Malicious code in server-filament-framework-css-minimizer-webpack-plugin (npm)

MAL-2025-188959

Malicious code in publish-thermosphere-native-cosmochemistry (npm)

MAL-2025-189376

Malicious code in schema-wasat-development-bellatrix (npm)

MAL-2025-188345

Malicious code in notify-beta-tree-mock-minify (npm)

MAL-2025-185522

Malicious code in archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy (npm)

MAL-2025-186247

Malicious code in commitlint-chalk-neptune-auriga (npm)

MAL-2025-188513

Malicious code in paleoclimatology-node-sass-asteroid-pulsar (npm)

MAL-2025-190194

Malicious code in vuepress-toml-magellan-rimraf (npm)

MAL-2025-188798

Malicious code in prettier-meteor-mineralogy-vuepress (npm)

MAL-2025-189702

Malicious code in stub-emulate-decompress-view-sandbox (npm)

MAL-2025-186040

Malicious code in catch-stack-load-public-grep (npm)

MAL-2025-186660

Malicious code in dysonswarm-joviology-node-sass-troposphere (npm)

MAL-2025-188591

Malicious code in pavo-xenon-markdownlint-enceladus (npm)

MAL-2025-185970

Malicious code in cache-umbra-geoarchaeology-server (npm)

MAL-2025-187632

Malicious code in juno-areology-dorado-webdriver-mocha (npm)

MAL-2025-187706

Malicious code in kronos-inquirer-promise-dactyl (npm)

MAL-2025-188003

Malicious code in metabolomics-octans-soap-membrane (npm)

MAL-2025-187465

Malicious code in inflation-hercules-websockets-private (npm)

MAL-2025-189946

Malicious code in toml-ethology-cordelia-carpo (npm)

MAL-2025-185830

Malicious code in biosignature-jasmine-solis-promise (npm)

MAL-2025-188186

Malicious code in native-thermosphere-hermes-server (npm)