Supply Chain Incidents

MAL-2025-187355

Malicious code in hexo-publish-hexo-xo (npm)

MAL-2025-186511

Malicious code in decrypt-xml-compress-moon-file (npm)

MAL-2025-189335

Malicious code in sandbox-bash-authorize-hot-simulate (npm)

MAL-2025-189688

Malicious code in stream-sequelize-writable-local (npm)

MAL-2025-187880

Malicious code in luna-sequelize-markdown-pdf-meissa (npm)

MAL-2025-186955

Malicious code in fermiparadox-mini-css-extract-plugin-andromeda-mongodb (npm)

MAL-2025-187069

Malicious code in fusion-publish-query-auth0 (npm)

MAL-2025-188521

Malicious code in paleoecology-tardigrade-express-rocket (npm)

MAL-2025-185695

Malicious code in await-jwt-vuetify-event (npm)

MAL-2025-190433

Malicious code in yildun-fork-chalk-farout (npm)

MAL-2025-187731

Malicious code in leda-epigenetics-redshift-geochronology (npm)

MAL-2025-189144

Malicious code in rehype-mesosphere-orbit-puppeteer (npm)

MAL-2025-190090

Malicious code in upsilon-decode-catch-log-function (npm)

MAL-2025-186961

Malicious code in figures-archaeoastronomy-hadron-enif (npm)

MAL-2025-188156

Malicious code in mutation-promise-xenon-fermion (npm)

MAL-2025-186490

Malicious code in data-grep-string-transpile-link (npm)

MAL-2025-186891

Malicious code in exec-radiometric-aether-juno (npm)

MAL-2025-188206

Malicious code in nebula-init-resolvers-frontend (npm)

MAL-2025-190360

Malicious code in xanthus-websockets-helios-duplex (npm)

MAL-2025-186348

Malicious code in cosmochemistry-lynx-ceres-europa (npm)

MAL-2025-189413

Malicious code in sedna-json-yildun-helios (npm)

MAL-2025-187432

Malicious code in import-benchmark-warn-node-catch (npm)

MAL-2025-187423

Malicious code in ignite-callback-cosmochemistry-paleobotany (npm)

MAL-2025-186710

Malicious code in elektra-xml-grus-hugo (npm)