Supply Chain Incidents

MAL-2025-185767

Malicious code in bellatrix-gulp-barnard-dagda (npm)

MAL-2025-189100

Malicious code in redgiant-cypress-mesosphere-technosignature (npm)

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

MAL-2025-188479

Malicious code in orogeny-karma-babel-sequelize (npm)

MAL-2025-189632

Malicious code in spy-sun-byte-debug-import (npm)

MAL-2025-188897

Malicious code in protractor-eclipse-ini-subscription (npm)

MAL-2025-186510

Malicious code in decrypt-sun-mock-rain-debug (npm)

MAL-2025-190046

Malicious code in umbriel-kastra-gacrux-google (npm)

MAL-2025-185937

Malicious code in bulma-titan-axios-ariel (npm)

MAL-2025-186412

Malicious code in csrf-relay-miranda-halley (npm)

MAL-2025-190444

Malicious code in zenith-algol-nodejs-pegasus (npm)

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

MAL-2025-188329

Malicious code in nodejs-sass-loader-carina-duplex (npm)

MAL-2025-189899

Malicious code in testcafe-pegasus-neptune-remark (npm)

MAL-2025-186320

Malicious code in cors-warp-farout-testcafe (npm)

MAL-2025-187325

Malicious code in helmet-pegasus-non-blocking-phoebe (npm)

MAL-2025-186980

Malicious code in final-scale-static-yaml-debug (npm)

MAL-2025-187855

Malicious code in long-boolean-table-compress-tree (npm)

MAL-2025-188741

Malicious code in playwright-asthenosphere-norma-cassini (npm)

MAL-2025-186717

Malicious code in element-ui-oscillation-higgs-solarnebula (npm)

MAL-2025-186045

Malicious code in centauri-cli-transport-selenium (npm)

MAL-2025-189725

Malicious code in subscription-playwright-public-carina (npm)

MAL-2025-187844

Malicious code in log-cron-execute-small-signal (npm)

MAL-2025-188918

Malicious code in proxima-sequelize-miranda-chalk (npm)