Supply Chain Incidents

MAL-2025-187540

Malicious code in iota-less-loader-commitlint-config-angular-private (npm)

MAL-2025-185712

Malicious code in axios-astro-html-webpack-plugin-algol (npm)

MAL-2025-187790

Malicious code in link-cron-simulate-assert-log (npm)

MAL-2025-188351

Malicious code in nova-astro-playwright-mira (npm)

MAL-2025-186642

Malicious code in draco-quasarjet-envconfig-technocracy (npm)

MAL-2025-189258

Malicious code in rocket-fomalhaut-sirius-kronos (npm)

MAL-2025-186697

Malicious code in elara-triton-quasar-async (npm)

MAL-2025-190398

Malicious code in xml-procyon-css-minimizer-webpack-plugin-iota (npm)

MAL-2025-188434

Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

MAL-2025-186037

Malicious code in catch-byte-decompress-cluster-assert (npm)

MAL-2025-189435

Malicious code in selenology-dione-envconfig-avior (npm)

MAL-2025-188719

Malicious code in pipe-got-filament-xenon (npm)

MAL-2025-190196

Malicious code in vuepress-winston-deneb-vulcan (npm)

MAL-2025-187842

Malicious code in local-ursa-karma-mysql (npm)

MAL-2025-190206

Malicious code in vulcan-nestjs-pm2-biohacking (npm)

MAL-2025-186656

Malicious code in dynamo-schema-higgs-geoarchaeology (npm)

MAL-2025-186944

Malicious code in fast-catch-notify-epsilon-new (npm)

MAL-2025-188991

Malicious code in pyxis-sedna-nebula-sedna (npm)

MAL-2025-189649

Malicious code in standard-parallax-chalk-hologram (npm)

MAL-2025-187711

Malicious code in kuiperbelt-phoebe-native-abiogenesis (npm)

MAL-2025-187334

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

MAL-2025-186137

Malicious code in chi-mu-socket-cold-small (npm)

MAL-2025-188447

Malicious code in ophiuchus-yonder-magellan-remark (npm)

MAL-2025-185483

Malicious code in antimatter-pino-celeste-dynamo (npm)