Supply Chain Incidents

MAL-2025-189283

Malicious code in root-user-await-validate-iota (npm)

MAL-2025-190174

Malicious code in visualize-validate-array-hot-analyze (npm)

MAL-2025-187671

Malicious code in kastra-oberon-spectroscopy-mocha (npm)

MAL-2025-188741

Malicious code in playwright-asthenosphere-norma-cassini (npm)

MAL-2025-188870

Malicious code in prompts-flare-celeste-sedna (npm)

MAL-2025-189957

Malicious code in tool-pino-xenos-rollup (npm)

MAL-2025-188236

Malicious code in neptunology-husky-dotenv-parse-variables-got (npm)

MAL-2025-186504

Malicious code in decompress-deserialize-nu-new-emulate (npm)

MAL-2025-188884

Malicious code in protected-old-compile-java-enum (npm)

MAL-2025-188623

Malicious code in perseus-css-minimizer-webpack-plugin-janus-dependencies (npm)

MAL-2025-187101

Malicious code in ganymede-flare-aurora-membrane (npm)

MAL-2025-190018

Malicious code in typeorm-postcss-process-biomimicry (npm)

MAL-2025-189324

Malicious code in sagitta-tachyon-rocket-nodemon (npm)

MAL-2025-188506

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

MAL-2025-186227

Malicious code in command-axios-asteroid-carina (npm)

MAL-2025-188941

Malicious code in public-perseus-zenith-blitz (npm)

MAL-2025-187134

Malicious code in gemini-csv-gacrux-andromeda (npm)

MAL-2025-190270

Malicious code in webdriver-mocha-chromedriver-javascript-json (npm)

MAL-2025-189875

Malicious code in terser-webpack-plugin-nestjs-umbriel-cluster (npm)

MAL-2025-189187

Malicious code in repository-repository-nconf-barnard (npm)

MAL-2025-190091

Malicious code in upsilon-decode-long-socket-final (npm)

MAL-2025-186652

Malicious code in dynamo-ganymede-init-sequelize (npm)

MAL-2025-185517

Malicious code in aquarius-slidev-equinox-procyon (npm)

MAL-2025-187263

Malicious code in halley-antares-lint-staged-protractor (npm)