Supply Chain Incidents

MAL-2025-186628

Malicious code in dotenv-sedna-inflation-figures (npm)

MAL-2025-187531

Malicious code in iota-aether-hawkingradiation-augmentedreality (npm)

MAL-2025-189204

Malicious code in resolvers-superflare-chalk-ini (npm)

MAL-2025-190241

Malicious code in water-cloud-public-big-user (npm)

MAL-2025-188506

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

MAL-2025-189335

Malicious code in sandbox-bash-authorize-hot-simulate (npm)

MAL-2025-189746

Malicious code in supercluster-command-betelgeuse-style-loader (npm)

MAL-2025-190423

Malicious code in yaml-chi-cloud-nu-code (npm)

MAL-2025-187355

Malicious code in hexo-publish-hexo-xo (npm)

MAL-2025-187880

Malicious code in luna-sequelize-markdown-pdf-meissa (npm)

MAL-2025-187069

Malicious code in fusion-publish-query-auth0 (npm)

MAL-2025-186955

Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm)

MAL-2025-188521

Malicious code in paleoecology-tardigrade-express-rocket (npm)

MAL-2025-185695

Malicious code in await-jwt-vuetify-event (npm)

MAL-2025-189144

Malicious code in rehype-mesosphere-orbit-puppeteer (npm)

MAL-2025-187318

Malicious code in helios-jekyll-polaris-soap (npm)

MAL-2025-188618

Malicious code in perseus-babel-spectron-antares (npm)

MAL-2025-190433

Malicious code in yildun-fork-chalk-farout (npm)

MAL-2025-185363

Malicious code in ablation-scripts-pino-terraforming (npm)

MAL-2025-187479

Malicious code in init-publish-boson-apex (npm)

MAL-2025-186227

Malicious code in command-axios-asteroid-carina (npm)

MAL-2025-185734

Malicious code in bad-info-encrypt-boolean-simple (npm)

MAL-2025-188739

Malicious code in planetology-stratosphere-library-csrf (npm)

MAL-2025-187357

Malicious code in hexo-steganography-cli-standard (npm)