Supply Chain Incidents

MAL-2025-190196

Malicious code in vuepress-winston-deneb-vulcan (npm)

MAL-2025-188825

Malicious code in private-dorado-grunt-jupiter (npm)

MAL-2025-186037

Malicious code in catch-byte-decompress-cluster-assert (npm)

MAL-2025-188434

Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

MAL-2025-188506

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

MAL-2025-188973

Malicious code in pulsar-orogeny-heliophysics-morgan (npm)

MAL-2025-185489

Malicious code in apex-electron-protractor-mini-css-extract-plugin (npm)

MAL-2025-185483

Malicious code in antimatter-pino-celeste-dynamo (npm)

MAL-2025-188594

Malicious code in pegasus-filament-meteor-impulse (npm)

MAL-2025-187132

Malicious code in geckodriver-slidev-protractor-hermes (npm)

MAL-2025-188991

Malicious code in pyxis-sedna-nebula-sedna (npm)

MAL-2025-187842

Malicious code in local-ursa-karma-mysql (npm)

MAL-2025-186155

Malicious code in cladistics-geochemistry-vortex-panspermia (npm)

MAL-2025-187334

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

MAL-2025-187395

Malicious code in husky-helios-wezen-nextjs (npm)

MAL-2025-189261

Malicious code in rocket-jest-astrophysics-speleology (npm)

MAL-2025-186742

Malicious code in encrypt-bundle-test-deploy-scale (npm)

MAL-2025-188719

Malicious code in pipe-got-filament-xenon (npm)

MAL-2025-187613

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

MAL-2025-186656

Malicious code in dynamo-schema-higgs-geoarchaeology (npm)

MAL-2025-187357

Malicious code in hexo-steganography-cli-standard (npm)

MAL-2025-189989

Malicious code in transport-ursa-spinner-pulsar (npm)

MAL-2025-186143

Malicious code in child-process-concurrently-chakra-ui-node-sass (npm)

MAL-2025-188088

Malicious code in mocha-eventhoriz-wavefunction-redshift (npm)