Supply Chain Incidents

MAL-2025-185838

Malicious code in biotechnology-draco-webpack-bellatrix (npm)

MAL-2025-188816

Malicious code in primatology-chromedriver-vortex-nebula (npm)

MAL-2025-188008

Malicious code in metalsmith-json-husky-dotenv-safe (npm)

MAL-2025-190046

Malicious code in umbriel-kastra-gacrux-google (npm)

MAL-2025-188479

Malicious code in orogeny-karma-babel-sequelize (npm)

MAL-2025-189876

Malicious code in terser-webpack-plugin-nucleosynthesis-hadron-taurus (npm)

MAL-2025-186023

Malicious code in castor-janus-interferometry-asteroid (npm)

MAL-2025-186289

Malicious code in container-async-awk-zeta-runtime (npm)

MAL-2025-186239

Malicious code in commitizen-chromedriver-redis-polaris (npm)

MAL-2025-188870

Malicious code in prompts-flare-celeste-sedna (npm)

MAL-2025-188741

Malicious code in playwright-asthenosphere-norma-cassini (npm)

MAL-2025-189632

Malicious code in spy-sun-byte-debug-import (npm)

MAL-2025-189225

Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

MAL-2025-187951

Malicious code in mdx-coronalmassejection-tardigrade-paleobotany (npm)

MAL-2025-188623

Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies (npm)

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

MAL-2025-188236

Malicious code in neptunology-husky-dotenv-parse-variables-got (npm)

MAL-2025-187543

Malicious code in iota-report-phi-good-public (npm)

MAL-2025-185624

Malicious code in async-lynx-lithosphere-telesto (npm)

MAL-2025-185937

Malicious code in bulma-titan-axios-ariel (npm)

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

MAL-2025-186412

Malicious code in csrf-relay-miranda-halley (npm)

MAL-2025-189875

Malicious code in terser-webpack-plugin-nestjs-umbriel-cluster (npm)

MAL-2025-188897

Malicious code in protractor-eclipse-ini-subscription (npm)