Supply Chain Incidents

MAL-2025-189324

Malicious code in sagitta-tachyon-rocket-nodemon (npm)

MAL-2025-188096

Malicious code in module-aquarius-enceladus-publish (npm)

MAL-2025-188133

Malicious code in mu-mu-psi-zero-java (npm)

MAL-2025-188566

Malicious code in parse-rho-wind-compress-simple (npm)

MAL-2025-190126

Malicious code in user-refactor-cluster-transpile-eta (npm)

MAL-2025-188359

Malicious code in nova-singularitarianism-warp-redshift (npm)

MAL-2025-189580

Malicious code in socketio-spawn-pyxis-nestjs (npm)

MAL-2025-188299

Malicious code in nightwatch-ursa-rollup-plugin-slidev (npm)

MAL-2025-186269

Malicious code in concurrently-janus-equinox-spinner (npm)

MAL-2025-188764

Malicious code in polaris-octans-bootstrap-bootstrap (npm)

MAL-2025-186774

Malicious code in envconfig-passport-charon-hermes (npm)

MAL-2025-185466

Malicious code in antares-iota-mysql-start (npm)

MAL-2025-186356

Malicious code in cosmology-schema-morgan-canopus (npm)

MAL-2025-185976

Malicious code in callback-jekyll-public-nebula (npm)

MAL-2025-189259

Malicious code in rocket-got-heka-json (npm)

MAL-2025-185970

Malicious code in cache-umbra-geoarchaeology-server (npm)

MAL-2025-188097

Malicious code in module-barnard-ganymede-sociobiology (npm)

MAL-2025-186075

Malicious code in chai-blazar-quasar-link (npm)

MAL-2025-188292

Malicious code in nightwatch-procyon-stream-docusaurus (npm)

MAL-2025-186672

Malicious code in easy-link-authorize-simple-view (npm)

MAL-2025-187134

Malicious code in gemini-csv-gacrux-andromeda (npm)

MAL-2025-189199

Malicious code in resolvers-heliophysics-apollo-cli (npm)

MAL-2025-186633

Malicious code in double-final-proxy-gamma-alpha (npm)

MAL-2025-185517

Malicious code in aquarius-slidev-equinox-procyon (npm)