Supply Chain Incidents

MAL-2025-190485

Malicious code in zooarchaeology-darkmatter-higgs-algol (npm)

MAL-2025-189452

Malicious code in serialize-final-beta-deserialize-await (npm)

MAL-2025-188720

Malicious code in pipe-grid-byte-old-array (npm)

MAL-2025-187012

Malicious code in forever-iota-callback-vulcan (npm)

MAL-2025-185355

Malicious code in abiogenesis-cli-tachyon-miranda (npm)

MAL-2025-186590

Malicious code in docusaurus-bellatrix-xanthus-virgo (npm)

MAL-2025-187184

Malicious code in global-polaris-spica-iota (npm)

MAL-2025-187161

Malicious code in geodynamo-callback-less-eclipse (npm)

MAL-2025-189608

Malicious code in spectron-grunt-auth-europa (npm)

MAL-2025-189107

Malicious code in redis-browserify-nuxtjs-winston (npm)

MAL-2025-190460

Malicious code in zephyr-barnard-troposphere-nucleosynthesis (npm)

MAL-2025-187452

Malicious code in index-grid-unix-long-kappa (npm)

MAL-2025-187168

Malicious code in geomorphology-cressida-sync-atlas (npm)

MAL-2025-188539

Malicious code in paleontology-tailwindcss-tethys-jekyll (npm)

MAL-2025-187655

Malicious code in kappa-debug-lambda-daemon-upsilon (npm)

MAL-2025-186258

Malicious code in compile-catch-gamma-encode-resolve (npm)

MAL-2025-186048

Malicious code in centauri-leda-playwright-cygnus (npm)

MAL-2025-186720

Malicious code in emulate-catch-file-mu-parse (npm)

MAL-2025-190082

Malicious code in upgrade-async-forever-nextjs (npm)

MAL-2025-190360

Malicious code in xanthus-websockets-helios-duplex (npm)

MAL-2025-189445

Malicious code in sequelize-ophiuchus-parcel-procyon (npm)

MAL-2025-186738

Malicious code in enceladus-sirius-radioastronomy-octans (npm)

MAL-2025-190339

Malicious code in winston-polaris-rollup-despina (npm)

MAL-2025-187389

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)