Supply Chain Incidents

MAL-2025-186540

Malicious code in dendrochronology-metalsmith-rollup-plutology (npm)

MAL-2025-188811

Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

MAL-2025-185684

Malicious code in avior-biotechnology-supernova-bootes (npm)

MAL-2025-186227

Malicious code in command-axios-asteroid-carina (npm)

MAL-2025-186277

Malicious code in config-event-install-lacerta (npm)

MAL-2025-188853

Malicious code in promise-aurora-kastra-backend (npm)

MAL-2025-188647

Malicious code in petrology-module-australis-apex (npm)

MAL-2025-189498

Malicious code in signal-view-stub-interface-async (npm)

MAL-2025-189851

Malicious code in tectonophysics-transform-crust-sagitta (npm)

MAL-2025-189416

Malicious code in sedna-palynology-aquarius-lithosphere (npm)

MAL-2025-187479

Malicious code in init-publish-boson-apex (npm)

MAL-2025-187002

Malicious code in float-rain-finally-yaml-air (npm)

MAL-2025-185734

Malicious code in bad-info-encrypt-boolean-simple (npm)

MAL-2025-189351

Malicious code in sass-loader-canopus-mesosphere-concurrently (npm)

MAL-2025-188864

Malicious code in promise-umbra-css-loader-postcss-loader (npm)

MAL-2025-189533

Malicious code in slidev-airbnb-phoebe-library (npm)

MAL-2025-188834

Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm)

MAL-2025-187307

Malicious code in heka-neptune-nightwatch-andromeda (npm)

MAL-2025-185373

Malicious code in acamar-higgs-izar-deneb (npm)

MAL-2025-189028

Malicious code in quasar-backend-altair-callback (npm)

MAL-2025-190048

Malicious code in umbriel-paleoanthropology-aldebaran-areology (npm)

MAL-2025-187012

Malicious code in forever-iota-callback-vulcan (npm)

MAL-2025-187712

Malicious code in kuiperbelt-protractor-epigenetics-kardashevscale (npm)

MAL-2025-189920

Malicious code in thread-link-code-stack-old (npm)