Supply Chain Incidents

MAL-2025-190463

Malicious code in zephyr-ganymede-fomalhaut-hercules (npm)

MAL-2025-185719

Malicious code in babel-dynamo-loop-terraforming (npm)

MAL-2025-188046

Malicious code in mineralogy-oauth-eslint-node-sass (npm)

MAL-2025-186289

Malicious code in container-async-awk-zeta-runtime (npm)

MAL-2025-186023

Malicious code in castor-janus-interferometry-asteroid (npm)

MAL-2025-187440

Malicious code in import-uglify-shell-assert-key (npm)

MAL-2025-185468

Malicious code in antares-jsonp-charon-europa (npm)

MAL-2025-186017

Malicious code in cassini-terser-prettier-mysql (npm)

MAL-2025-186196

Malicious code in cold-bad-theta-epsilon-route (npm)

MAL-2025-187001

Malicious code in float-new-route-benchmark-async (npm)

MAL-2025-189837

Malicious code in technocracy-spectron-webdriver-query-winston (npm)

MAL-2025-188783

Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)

MAL-2025-187557

Malicious code in izar-ora-exec-genomics (npm)

MAL-2025-189600

Malicious code in spawn-scorpius-antares-hexo (npm)

MAL-2025-190416

Malicious code in yakutsk-electron-nebula-jekyll (npm)

MAL-2025-188706

Malicious code in pino-pretty-phenomic-quasar-meteor (npm)

MAL-2025-186421

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm)

MAL-2025-188376

Malicious code in nuxtjs-steganography-dynamo-rocket (npm)

MAL-2025-187573

Malicious code in janus-greatfilter-cosmiconfig-ursa (npm)

MAL-2025-185614

Malicious code in async-cressida-umbra-vuepress (npm)

MAL-2025-188190

Malicious code in nconf-gemini-webdriver-mocha-forever (npm)

MAL-2025-189913

Malicious code in thermosphere-node-sass-farout-seismology (npm)

MAL-2025-186144

Malicious code in child-process-eridanus-cypress-zephyr (npm)

MAL-2025-185504

Malicious code in apollo-ini-grunt-radiant (npm)