Supply Chain Incidents

MAL-2025-186309

Malicious code in cordelia-websockets-yakutsk-quark (npm)

MAL-2025-188538

Malicious code in paleontology-sublimation-europa-backend (npm)

MAL-2025-188434

Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

MAL-2025-186891

Malicious code in exec-radiometric-aether-juno (npm)

MAL-2025-187134

Malicious code in gemini-csv-gacrux-andromeda (npm)

MAL-2025-187613

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

MAL-2025-185483

Malicious code in antimatter-pino-celeste-dynamo (npm)

MAL-2025-187334

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

MAL-2025-185801

Malicious code in big-data-shell-omega-reject (npm)

MAL-2025-187519

Malicious code in interstellarmedium-uninstall-update-paleoanthropology (npm)

MAL-2025-188991

Malicious code in pyxis-sedna-nebula-sedna (npm)

MAL-2025-187540

Malicious code in iota-less-loader-commitlint-config-angular-private (npm)

MAL-2025-186673

Malicious code in easy-parse-async-xi-analyze (npm)

MAL-2025-188608

Malicious code in pegasus-toml-neptune-nightwatch (npm)

MAL-2025-186742

Malicious code in encrypt-bundle-test-deploy-scale (npm)

MAL-2025-187842

Malicious code in local-ursa-karma-mysql (npm)

MAL-2025-189663

Malicious code in static-transpile-sanitize-emulate-parse (npm)

MAL-2025-188088

Malicious code in mocha-eventhoriz-wavefunction-redshift (npm)

MAL-2025-186930

Malicious code in express-superflare-antares-loopback (npm)

MAL-2025-189989

Malicious code in transport-ursa-spinner-pulsar (npm)

MAL-2025-185456

Malicious code in andromeda-impulse-quasarjet-elara (npm)

MAL-2025-189560

Malicious code in soap-weywot-robotics-on (npm)

MAL-2025-188719

Malicious code in pipe-got-filament-xenon (npm)

MAL-2025-187790

Malicious code in link-cron-simulate-assert-log (npm)