Supply Chain Incidents

MAL-2025-186037

Malicious code in catch-byte-decompress-cluster-assert (npm)

MAL-2025-189276

Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)

MAL-2025-187254

Malicious code in gulp-parcel-bioinformatics-halley (npm)

MAL-2025-187480

Malicious code in init-rest-sedna-gacrux (npm)

MAL-2025-185741

Malicious code in bad-xml-simple-yaml-reject (npm)

MAL-2025-187842

Malicious code in local-ursa-karma-mysql (npm)

MAL-2025-188719

Malicious code in pipe-got-filament-xenon (npm)

MAL-2025-187296

Malicious code in hawkingradiation-ora-celeste-toml (npm)

MAL-2025-188533

Malicious code in paleontology-luminescence-less-hermes (npm)

MAL-2025-187133

Malicious code in gemini-csv-cryonics-castor (npm)

MAL-2025-186033

Malicious code in cat-sudo-node-decrypt-analyze (npm)

MAL-2025-186062

Malicious code in centaurus-gammarayburst-rimraf-glaciology (npm)

MAL-2025-186526

Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)

MAL-2025-187112

Malicious code in ganymede-server-test-warp (npm)

MAL-2025-188991

Malicious code in pyxis-sedna-nebula-sedna (npm)

MAL-2025-188723

Malicious code in pipe-parallax-build-kinetic (npm)

MAL-2025-186742

Malicious code in encrypt-bundle-test-deploy-scale (npm)

MAL-2025-187503

Malicious code in integer-pipe-beta-orchestrate-simulate (npm)

MAL-2025-186449

Malicious code in cypress-phoenix-higgs-chromedriver (npm)

MAL-2025-185365

Malicious code in abstract-decrypt-async-public-phi (npm)

MAL-2025-187960

Malicious code in mechatronics-boson-quasarjet-wolf (npm)

MAL-2025-189989

Malicious code in transport-ursa-spinner-pulsar (npm)

MAL-2025-187334

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

MAL-2025-190434

Malicious code in yildun-mesosphere-redis-spectron (npm)