Supply Chain Incidents

MAL-2025-186806

Malicious code in eridanus-darkenergy-blackhole-selenium (npm)

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

MAL-2025-185618

Malicious code in async-eta-try-balance-java (npm)

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

MAL-2025-188897

Malicious code in protractor-eclipse-ini-subscription (npm)

MAL-2025-185767

Malicious code in bellatrix-gulp-barnard-dagda (npm)

MAL-2025-185977

Malicious code in callback-kastra-wolf-abiogenesis (npm)

MAL-2025-190164

Malicious code in virtualreality-abiogenesis-passport-chalk (npm)

MAL-2025-185937

Malicious code in bulma-titan-axios-ariel (npm)

MAL-2025-188329

Malicious code in nodejs-sass-loader-carina-duplex (npm)

MAL-2025-186320

Malicious code in cors-warp-farout-testcafe (npm)

MAL-2025-185600

Malicious code in astroinformatics-brane-firebase-socketio (npm)

MAL-2025-187322

Malicious code in helmet-blitz-izar-update (npm)

MAL-2025-186980

Malicious code in final-scale-static-yaml-debug (npm)

MAL-2025-188941

Malicious code in public-perseus-zenith-blitz (npm)

MAL-2025-189899

Malicious code in testcafe-pegasus-neptune-remark (npm)

MAL-2025-187877

Malicious code in luna-cordelia-blackhole-lithosphere (npm)

MAL-2025-186412

Malicious code in csrf-relay-miranda-halley (npm)

MAL-2025-185969

Malicious code in cache-simple-awk-sudo-class (npm)

MAL-2025-189725

Malicious code in subscription-playwright-public-carina (npm)

MAL-2025-186045

Malicious code in centauri-cli-transport-selenium (npm)

MAL-2025-186921

Malicious code in export-decompress-integer-encrypt-void (npm)

MAL-2025-190299

Malicious code in weywot-astrobiology-biomimicry-postcss (npm)

MAL-2025-186805

Malicious code in eridanus-cosmicsilence-heliophysics-achernar (npm)