Supply Chain Incidents

MAL-2025-190222

Malicious code in warp-hyperion-quasar-quark (npm)

MAL-2025-185446

Malicious code in altair-async-jabbah-radioastronomy (npm)

MAL-2025-189521

Malicious code in sirius-registry-webpack-quasar (npm)

MAL-2025-190090

Malicious code in upsilon-decode-catch-log-function (npm)

MAL-2025-185791

Malicious code in betelgeuse-development-heliophysics-cordelia (npm)

MAL-2025-190469

Malicious code in zephyr-prettier-sequelize-callisto (npm)

MAL-2025-190203

Malicious code in vulcan-asthenosphere-babel-exoplanet (npm)

MAL-2025-189416

Malicious code in sedna-palynology-aquarius-lithosphere (npm)

MAL-2025-186864

Malicious code in europa-alphard-docusaurus-io (npm)

MAL-2025-190092

Malicious code in upsilon-fast-epsilon-optimize-interface (npm)

MAL-2025-189771

Malicious code in superposition-brane-gravity-altair (npm)

MAL-2025-188727

Malicious code in pipe-virgo-perseus-auth (npm)

MAL-2025-186540

Malicious code in dendrochronology-metalsmith-rollup-plutology (npm)

MAL-2025-188811

Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

MAL-2025-185684

Malicious code in avior-biotechnology-supernova-bootes (npm)

MAL-2025-187158

Malicious code in geochemistry-izar-farout-uninstall (npm)

MAL-2025-189756

Malicious code in superflare-paleoclimatology-pavo-lacerta (npm)

MAL-2025-186652

Malicious code in dynamo-ganymede-init-sequelize (npm)

MAL-2025-186815

Malicious code in eris-framework-lacerta-biomimicry (npm)

MAL-2025-189851

Malicious code in tectonophysics-transform-crust-sagitta (npm)

MAL-2025-190360

Malicious code in xanthus-websockets-helios-duplex (npm)

MAL-2025-188784

Malicious code in postcss-loader-regulus-whitedwarf-paleoanthropology (npm)

MAL-2025-187576

Malicious code in janus-neptune-spectron-publish (npm)

MAL-2025-186891

Malicious code in exec-radiometric-aether-juno (npm)