Supply Chain Incidents

MAL-2025-189310

Malicious code in sagitta-antares-winston-dotenv (npm)

MAL-2025-185700

Malicious code in await-supercluster-prosthetics-postcss-loader (npm)

MAL-2025-188794

Malicious code in prettier-cordelia-npm-toml (npm)

MAL-2025-189754

Malicious code in superflare-aldebaran-phenomic-quantumfoam (npm)

MAL-2025-186897

Malicious code in execute-long-pipe-file-encode (npm)

MAL-2025-187876

Malicious code in luminescence-pino-superagent-axios (npm)

MAL-2025-189688

Malicious code in stream-sequelize-writable-local (npm)

MAL-2025-186990

Malicious code in firebase-helios-bionics-virtualreality (npm)

MAL-2025-186874

Malicious code in event-biogeochemistry-blitz-eris (npm)

MAL-2025-188696

Malicious code in pi-permission-debug-decrypt-slow (npm)

MAL-2025-186094

Malicious code in chalk-asteroid-await-prettier-stylelint (npm)

MAL-2025-185973

Malicious code in callback-dynamo-lacerta-chakra-ui (npm)

MAL-2025-189783

Malicious code in supervisor-winston-superagent-exosphere (npm)

MAL-2025-189553

Malicious code in soap-comet-adonis-karma (npm)

MAL-2025-186716

Malicious code in element-ui-nodejs-bellatrix-hapi (npm)

MAL-2025-186110

Malicious code in changelog-gridsome-perseus-css-minimizer-webpack-plugin (npm)

MAL-2025-189168

Malicious code in release-it-perseus-ini-node-config (npm)

MAL-2025-190090

Malicious code in upsilon-decode-catch-log-function (npm)

MAL-2025-188853

Malicious code in promise-aurora-kastra-backend (npm)

MAL-2025-188761

Malicious code in polaris-build-event-dotenv-parse-variables (npm)

MAL-2025-188583

Malicious code in passport-sirius-solis-quantum-computing (npm)

MAL-2025-185355

Malicious code in abiogenesis-cli-tachyon-miranda (npm)

MAL-2025-189452

Malicious code in serialize-final-beta-deserialize-await (npm)

MAL-2025-189671

Malicious code in stop-chalk-build-less-loader (npm)