Supply Chain Incidents

MAL-2025-187494

Malicious code in install-bunyan-bellatrix-impulse (npm)

MAL-2025-188329

Malicious code in nodejs-sass-loader-carina-duplex (npm)

MAL-2025-189461

Malicious code in server-child-process-cosmicray-extremophile (npm)

MAL-2025-186320

Malicious code in cors-warp-farout-testcafe (npm)

MAL-2025-188709

Malicious code in pino-pretty-technosignature-biomimicry-wezen (npm)

MAL-2025-186980

Malicious code in final-scale-static-yaml-debug (npm)

MAL-2025-189812

Malicious code in tardigrade-perseus-scripts-csrf (npm)

MAL-2025-188694

Malicious code in pi-compress-grid-class-fast (npm)

MAL-2025-187404

Malicious code in hydra-regulus-wavefunction-spectron (npm)

MAL-2025-188296

Malicious code in nightwatch-spawn-leda-tool (npm)

MAL-2025-186196

Malicious code in cold-bad-theta-epsilon-route (npm)

MAL-2025-188285

Malicious code in nightwatch-global-subduction-eslint-plugin (npm)

MAL-2025-188243

Malicious code in neuromorphic-cybernetics-cosmogenic-neutronstar (npm)

MAL-2025-185995

Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin (npm)

MAL-2025-186281

Malicious code in config-xml-sirius-config (npm)

MAL-2025-189725

Malicious code in subscription-playwright-public-carina (npm)

MAL-2025-190256

Malicious code in web-yaml-analyze-finally-short (npm)

MAL-2025-186045

Malicious code in centauri-cli-transport-selenium (npm)

MAL-2025-186921

Malicious code in export-decompress-integer-encrypt-void (npm)

MAL-2025-186412

Malicious code in csrf-relay-miranda-halley (npm)

MAL-2025-190299

Malicious code in weywot-astrobiology-biomimicry-postcss (npm)

MAL-2025-188816

Malicious code in primatology-chromedriver-vortex-nebula (npm)

MAL-2025-187844

Malicious code in log-cron-execute-small-signal (npm)

MAL-2025-189442

Malicious code in sequelize-configstore-neuromorphic-petrology (npm)